<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="2374">
<package pkgid="986014135900c75008f629c41aaadb630287afd963fafbbfe96e7cce6232bd6e" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="fe46f668815e55b613906fc74c263706b608d9705b2a26d03361eb34e3f2a3ec" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="51fa75aaf21bc1778024701a4d0676f45dac1459a29018d2b9b26e825ffde101" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="ec3dd0862221c38dac391d7877ac54f5dc096b3c729d77c5133762a9da354c0a" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="3c842687e3b0f65180745f26efb2c9a48ea401b5915c02ab162dc87ec3d669ff" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="82bc13f9bd2bee17e5a3f9dde1c775ab22d6ea0020856e32b80abc173a8c65f2" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="29.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-29" date="1520856000">- Bump version to 1.3.6.1-29
- Resolves: Bug 1553602 - ipa-server-install fails with Error: Upgrade failed with no such entry [rhel-7.4.z]</changelog>
</package>
<package pkgid="f365173737e029ef0b36370d35e9e4507bf22c55de61fee0440b6e7f3a46a9e2" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="883c5982d0414c9b5a1917e5391fc30ff130760579b5c821e051811031d8baa9" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="f94d5ce5403aa3f2e3a1ff0b7f8f2450d59c61bf39f8db13a9820a83f85759e9" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="f09408851d5801a753fbfca432d01938b28d6a5490c86fb962fa1adbb6505800" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="bd52856b48f2f11a7cbd1ad207ea12bc92da5f71fe0ff550630ee00129bc5a0f" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="31c06735696c9bad09d88060af5da4c8097171b5cbaac614590a275725464f5d" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="29.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-29" date="1520856000">- Bump version to 1.3.6.1-29
- Resolves: Bug 1553602 - ipa-server-install fails with Error: Upgrade failed with no such entry [rhel-7.4.z]</changelog>
</package>
<package pkgid="03fc71e93c1bbc80a4d00217875e676f7ce2ea94f5bed5fb6407350404e3c52d" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="8a07ee3ee779fa9008da6e909b27ff4cc3e99bbc79e300ff716b7e9ee62859cb" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="66622faf4466d3ef2b6c3a610116111f050a21bb05d4b30a775b877e2a21007f" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="0b53a7c2592460f97e86b8aeefa1effa6f924dc2962f27f55cf5abb16d0a5fb0" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="a8fbdd425a8fafc140c10768ff0532674eac12d06d4f92d49b1789e2d4055093" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="b46150d3e8fd30ef56b8d7ad29715ecebafcf4002518cebad9883b191c073ba6" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="29.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-29" date="1520856000">- Bump version to 1.3.6.1-29
- Resolves: Bug 1553602 - ipa-server-install fails with Error: Upgrade failed with no such entry [rhel-7.4.z]</changelog>
</package>
<package pkgid="c4e6ee1fc978a2d23567db0cda179f38865d39a8a284816d13c6793bc53a15ae" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="4ba20711ad44c05aa5ba4c61e45e930d8c3fbe158354543e2cd8513098a5db77" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="237d21ec79177e85001bebe2ce8b2468d43a850074360bb8d3c84811680cd9d3" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="49dfa18d1fd0e84d850ec1490f353a67de26897f0eff26d854001944a9cc9db3" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="15c8ee48e498e47cecbb7c570d835b63d2d2d161932f78e2807b9a9a4dbc75c1" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="c1f3293488091685ec3fc30b8166681d2430d90bd9700098b3926eb1a17e2692" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="29.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-29" date="1520856000">- Bump version to 1.3.6.1-29
- Resolves: Bug 1553602 - ipa-server-install fails with Error: Upgrade failed with no such entry [rhel-7.4.z]</changelog>
</package>
<package pkgid="26bde8cbf8286c3a23e041f7b576e780b000ddb0d5ff71457e5d6c4e6b9d9742" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="253cdd7907ee1ce9edc1e7cef5c137dd948bb276754e993f620e2a7e49235c7d" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="7bf9620247bab5e226d424c3b2adc8f375534d095ab1923a468c79b25105a642" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="6f66dff1cb24cff054ef770b2c7649e9fa7c8b8558a9eb9c8805741c1014307f" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="d0bd1aeade835fdfca61d9bb23033f40fd992066124cf1934a270c7d0271ef9d" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="1f3e42484d131fa2f8f5487ad49a3c4253188aeebf25f0cba98d02121d9dd453" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.6.1" rel="29.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-29" date="1520856000">- Bump version to 1.3.6.1-29
- Resolves: Bug 1553602 - ipa-server-install fails with Error: Upgrade failed with no such entry [rhel-7.4.z]</changelog>
</package>
<package pkgid="e8a02872fe9f2a6015c7316ed2ffa4c3587f692b3fbc670bfa0695937046a207" name="NetworkManager" arch="i686">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="7ee711481f3a6583e1915d5c394117c869bc3c8e8977b4e4a6aabd75eb112711" name="NetworkManager" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="0b1189ac85b0a86e60c49ffe89127a7439b297f7d1e701e6b1d5856e013a1eda" name="NetworkManager-adsl" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="b3b15c8b71f7bdc144d500630e984ed81adda67e3c29f40e47f63dc9559f0312" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="d4a82f3430dc05cca9e93a9d838957236cefdf5537f278f79d84edee53d5f9dd" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="3950e91f6494701a837c6ed32c007eb2d7f279f332ac0a5bd855ab7218d5dc5a" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="d6c34f3d4d0f72645107dd4b74725ad1b6e6f7061f1509ee3791652e5c038ba5" name="NetworkManager-glib" arch="i686">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="c725bc0f29931b4a60b558d6e83e5c08f0bd3d1070e267e9aa7885a9699ac036" name="NetworkManager-glib" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="6997bac047c20bff04a1eb65771858cb8d43bd1d9953d73210bf86eecc7aadc9" name="NetworkManager-glib-devel" arch="i686">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="14cbb2bc791d26d283b31fcb5a75f741a473acbcfbdd1c241aba6b80985164e4" name="NetworkManager-glib-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="b1d4ba9f580737b9c5ad9e683e18c8753ec5ee50fbfe03cf53621d8985742bcd" name="NetworkManager-libnm" arch="i686">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="acb4d24e8670ab1c7e05c62ca4f72abd97670f4fb28c8debc4d6f5aad95bbc65" name="NetworkManager-libnm" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="46fc14c8fd2e9cd928fe8100274aec9e00e20f6be8a42f5c2d28cf52371c40cb" name="NetworkManager-libnm-devel" arch="i686">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="6e47b3a4f6e396bb9c3254b82b647846cbd29cd192647b49d221618981a46229" name="NetworkManager-libnm-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="0ba9846ab4d8fc628120f09b7c7c5d70e3979b73e1256f12d3d6dd4e850f9ae4" name="NetworkManager-ppp" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="daa5883c50c1c74571ceac625ee6d4847f96a6c4cf5d8b6d157519fba053b5d3" name="NetworkManager-team" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="5bcfa5823a4ff4a5d1c413ad642471b26c7e53038bb4e823076448cb9f38d465" name="NetworkManager-tui" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="d896d026f4320b0e4003fd8d743504e34716e78c99c3c9a169275c5b446a8699" name="NetworkManager-wifi" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="67010b861523430fad4f9ded41cc7bae7832d0d2b32742298abe4f8fd81e6bdf" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="0716694b1c0201c227fc0e23f4890f381a43884d7add3c16be3dc771d9a6cb8e" name="WALinuxAgent" arch="noarch">
  <version epoch="0" ver="2.2.14" rel="1.el7"/>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 2.0.13-1" date="1433160000">- Update to upstream 2.0.13 package.
- Remove global commit md5sum and fix Source0 to point to correct location.
- Fix setup to deal with "WALinuxAgent-WALinuxAgent" naming scheme
- Added files reference for /udev/rules.d/99-azure-product-uuid.rules</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 2.0.16-1" date="1452772800">- Update to 2.0.16
  Resolves: rhbz#1296360</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 2.1.5-1" date="1473768000">- Update to v2.1.5
  Resolves: rhbz#1360492</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 2.1.5-2" date="1474459200">- Several QE updates to this file
  Resolves: rhbz#1360492</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 2.2.0-1" date="1475236800">- Update to v2.2.0
  Resolves: rhbz#1360492</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.2.0-4.el7" date="1484568000">- agent-RHEL-7-hostname-533.patch [bz#1413674]
- agent-fix-for-hostnamectl-534.patch [bz#1413674]
- Resolves: bz#1413674
  ([WALA] Fail to send hostname to DHCP server during provisioning)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.2.4-1.el7" date="1488369600">- Rebase to 2.2.4 [bz#1419201]
- resolves: bz#1419201
  WALA 2.2.4</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.2.4-2.el7" date="1492603200">- Enable AutoUpdate by default [bz#1434933]
- Resolves: bz#1434933
  ([WALA][RHEL-7] Enable AutoUpdate by default)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.2.10-1.el7" date="1493208000">- Rebase to 2.2.10 [bz#1443425]
- Resolves: bz#1443425
  ([WALA]Request to package WALA 2.2.10 into RHEL 7 Repo)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.2.14-1.el7" date="1499169600">- Rebase to 2.2.14 [bz#1451172]
- wla-Remove-FIPS-setting-from-the-default-config.patch [bz#1467553]
- Resolves: bz#1451172
  ([WALA] Request to package WALA 2.2.14 into RHEL 7 Repo)
- Resolves: bz#1467553
  ([WALA] Remove FIPS from default config in WALA-2.2.14)</changelog>
</package>
<package pkgid="d3220f49bb933a60897535aa27e8deb4eed3882d34f09fa8b53ce702c9013dc8" name="WALinuxAgent" arch="noarch">
  <version epoch="0" ver="2.2.18" rel="1.el7"/>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 2.0.16-1" date="1452772800">- Update to 2.0.16
  Resolves: rhbz#1296360</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 2.1.5-1" date="1473768000">- Update to v2.1.5
  Resolves: rhbz#1360492</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 2.1.5-2" date="1474459200">- Several QE updates to this file
  Resolves: rhbz#1360492</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 2.2.0-1" date="1475236800">- Update to v2.2.0
  Resolves: rhbz#1360492</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.2.0-4.el7" date="1484568000">- agent-RHEL-7-hostname-533.patch [bz#1413674]
- agent-fix-for-hostnamectl-534.patch [bz#1413674]
- Resolves: bz#1413674
  ([WALA] Fail to send hostname to DHCP server during provisioning)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.2.4-1.el7" date="1488369600">- Rebase to 2.2.4 [bz#1419201]
- resolves: bz#1419201
  WALA 2.2.4</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.2.4-2.el7" date="1492603200">- Enable AutoUpdate by default [bz#1434933]
- Resolves: bz#1434933
  ([WALA][RHEL-7] Enable AutoUpdate by default)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.2.10-1.el7" date="1493208000">- Rebase to 2.2.10 [bz#1443425]
- Resolves: bz#1443425
  ([WALA]Request to package WALA 2.2.10 into RHEL 7 Repo)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.2.14-1.el7" date="1499169600">- Rebase to 2.2.14 [bz#1451172]
- wla-Remove-FIPS-setting-from-the-default-config.patch [bz#1467553]
- Resolves: bz#1451172
  ([WALA] Request to package WALA 2.2.14 into RHEL 7 Repo)
- Resolves: bz#1467553
  ([WALA] Remove FIPS from default config in WALA-2.2.14)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.2.18-1.el7" date="1507636800">- Rebase to 2.2.18 [bz#1491873]
- Resolves: bz#1491873
  ([WALA]Request to package WALA 2.2.18 into RHEL 7 Repo)</changelog>
</package>
<package pkgid="0d4d8c2c07f65646486417307ddb5d10c7bfae2def88033e77ff67ae00980a5c" name="accountsservice" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="3d35a06fd31b3375b3661d6ce04c06761de69e943a0ecdb9ac3408b98390fa3f" name="accountsservice-devel" arch="i686">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="dda07ea9a7ffc4863b5319af7f48305e1344003b95d5c485894fa3c317d54ded" name="accountsservice-devel" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="d1d62935877ff2480bb12570f7c20c4d3ebd5abaf04f2a4c0a9c803821bb3899" name="accountsservice-libs" arch="i686">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="690ec86c3ca4f613226235ca372bd438fab309a20ce965e3e0a7190fdd0fec5d" name="accountsservice-libs" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="6d0326e2417b664ce8954ff428e9c73677f83a5f4122be5f8bdfdbe1ffe94d6a" name="ansible" arch="noarch">
  <version epoch="0" ver="2.4.0.0" rel="5.el7"/>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; - 2.3.1.0-1" date="1496318400">- Update to 2.3.1.0.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.1.0-2" date="1498132800">- Package for RHEL Extras (inspired by rybrown's work)
- Disable tests in order to reduce build requirements
- Disable Python 3 support
- Do not depend on python-keyczar, it is needed only for the deprecated accelereated mode
- Default role search path in ansible.cfg including /usr/share/ansible/roles
- Apply a patch to fix ansible-galaxy regression https://github.com/ansible/ansible/issues/25933 (will be in 2.3.2)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.1.0-3" date="1498478400">- Claim ownership of the /usr/share/ansible and /usr/share/ansible/roles dirs.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.2.0-0.1.rc5" date="1502193600">- Update to the latest release candidate of 2.3.2.0 (rc5)
- Drop the patch for issue 25933 (bz #1463440), it is included upstream.</changelog>
  <changelog author="Ryan Brown &lt;rybrown@redhat.com&gt; - 2.3.2.0-1" date="1502193601">- Rebase to Ansible 2.3.2 release
- Resolves bz #1478867</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.2.0-2" date="1503576000">- Add a runtime dependency on python-passlib (bz #1484860).</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-1" date="1505476800">- Rebase to the Ansible 2.4.0.0 release (bz #1492477).</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-3" date="1505995200">- Require python-jmespath, needed for the json_query filter. bz #1484910</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-4" date="1507032000">- Backport patch for CVE-2017-7550 - PR#30875 rhbz#1473645</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-5" date="1507032001">- Backport a fix for the selinux module. Upstream github issue 30618</changelog>
</package>
<package pkgid="08c4f96a5d6f27248dd7204ada1a3b5bb05ce340f6dcbca21a62d35abddfb6ee" name="ansible" arch="noarch">
  <version epoch="0" ver="2.4.1.0" rel="1.el7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.1.0-2" date="1498132800">- Package for RHEL Extras (inspired by rybrown's work)
- Disable tests in order to reduce build requirements
- Disable Python 3 support
- Do not depend on python-keyczar, it is needed only for the deprecated accelereated mode
- Default role search path in ansible.cfg including /usr/share/ansible/roles
- Apply a patch to fix ansible-galaxy regression https://github.com/ansible/ansible/issues/25933 (will be in 2.3.2)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.1.0-3" date="1498478400">- Claim ownership of the /usr/share/ansible and /usr/share/ansible/roles dirs.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.2.0-0.1.rc5" date="1502193600">- Update to the latest release candidate of 2.3.2.0 (rc5)
- Drop the patch for issue 25933 (bz #1463440), it is included upstream.</changelog>
  <changelog author="Ryan Brown &lt;rybrown@redhat.com&gt; - 2.3.2.0-1" date="1502193601">- Rebase to Ansible 2.3.2 release
- Resolves bz #1478867</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.2.0-2" date="1503576000">- Add a runtime dependency on python-passlib (bz #1484860).</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-1" date="1505476800">- Rebase to the Ansible 2.4.0.0 release (bz #1492477).</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-3" date="1505995200">- Require python-jmespath, needed for the json_query filter. bz #1484910</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-4" date="1507032000">- Backport patch for CVE-2017-7550 - PR#30875 rhbz#1473645</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-5" date="1507032001">- Backport a fix for the selinux module. Upstream github issue 30618</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.1.0-1" date="1510056000">- Sync with Fedora version 2.4.1.0-2, brings Ansible 2.4.1.0.
- Drop upstream patches.</changelog>
</package>
<package pkgid="10b2af89eb02959b4e65929261b4102035310d03930d69f8dac8bd088247f99c" name="ansible" arch="noarch">
  <version epoch="0" ver="2.4.2.0" rel="2.el7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.2.0-0.1.rc5" date="1502193600">- Update to the latest release candidate of 2.3.2.0 (rc5)
- Drop the patch for issue 25933 (bz #1463440), it is included upstream.</changelog>
  <changelog author="Ryan Brown &lt;rybrown@redhat.com&gt; - 2.3.2.0-1" date="1502193601">- Rebase to Ansible 2.3.2 release
- Resolves bz #1478867</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.2.0-2" date="1503576000">- Add a runtime dependency on python-passlib (bz #1484860).</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-1" date="1505476800">- Rebase to the Ansible 2.4.0.0 release (bz #1492477).</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-3" date="1505995200">- Require python-jmespath, needed for the json_query filter. bz #1484910</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-4" date="1507032000">- Backport patch for CVE-2017-7550 - PR#30875 rhbz#1473645</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-5" date="1507032001">- Backport a fix for the selinux module. Upstream github issue 30618</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.1.0-1" date="1510056000">- Sync with Fedora version 2.4.1.0-2, brings Ansible 2.4.1.0.
- Drop upstream patches.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.2.0-1" date="1513684800">- Update to Ansible 2.4.2.0, unbreaks ansible-pull (bz #1506781, issue 31449)
- Claim ownership of the /usr/share/ansible/plugins dir (bz #1499847)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.2.0-2" date="1516104000">- Bump Release to not conflict with EPEL</changelog>
</package>
<package pkgid="e4ccccb0812c0d651140efa47d3ef2e270b9ea7eab917dfaf2129b2a39af2a1b" name="ansible-doc" arch="noarch">
  <version epoch="0" ver="2.4.0.0" rel="5.el7"/>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; - 2.3.1.0-1" date="1496318400">- Update to 2.3.1.0.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.1.0-2" date="1498132800">- Package for RHEL Extras (inspired by rybrown's work)
- Disable tests in order to reduce build requirements
- Disable Python 3 support
- Do not depend on python-keyczar, it is needed only for the deprecated accelereated mode
- Default role search path in ansible.cfg including /usr/share/ansible/roles
- Apply a patch to fix ansible-galaxy regression https://github.com/ansible/ansible/issues/25933 (will be in 2.3.2)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.1.0-3" date="1498478400">- Claim ownership of the /usr/share/ansible and /usr/share/ansible/roles dirs.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.2.0-0.1.rc5" date="1502193600">- Update to the latest release candidate of 2.3.2.0 (rc5)
- Drop the patch for issue 25933 (bz #1463440), it is included upstream.</changelog>
  <changelog author="Ryan Brown &lt;rybrown@redhat.com&gt; - 2.3.2.0-1" date="1502193601">- Rebase to Ansible 2.3.2 release
- Resolves bz #1478867</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.2.0-2" date="1503576000">- Add a runtime dependency on python-passlib (bz #1484860).</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-1" date="1505476800">- Rebase to the Ansible 2.4.0.0 release (bz #1492477).</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-3" date="1505995200">- Require python-jmespath, needed for the json_query filter. bz #1484910</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-4" date="1507032000">- Backport patch for CVE-2017-7550 - PR#30875 rhbz#1473645</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-5" date="1507032001">- Backport a fix for the selinux module. Upstream github issue 30618</changelog>
</package>
<package pkgid="fe06dbf6b0837faf64bab99b7994c6e8607e1ecfaa9422e0962f6238d03ce778" name="ansible-doc" arch="noarch">
  <version epoch="0" ver="2.4.1.0" rel="1.el7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.1.0-2" date="1498132800">- Package for RHEL Extras (inspired by rybrown's work)
- Disable tests in order to reduce build requirements
- Disable Python 3 support
- Do not depend on python-keyczar, it is needed only for the deprecated accelereated mode
- Default role search path in ansible.cfg including /usr/share/ansible/roles
- Apply a patch to fix ansible-galaxy regression https://github.com/ansible/ansible/issues/25933 (will be in 2.3.2)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.1.0-3" date="1498478400">- Claim ownership of the /usr/share/ansible and /usr/share/ansible/roles dirs.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.2.0-0.1.rc5" date="1502193600">- Update to the latest release candidate of 2.3.2.0 (rc5)
- Drop the patch for issue 25933 (bz #1463440), it is included upstream.</changelog>
  <changelog author="Ryan Brown &lt;rybrown@redhat.com&gt; - 2.3.2.0-1" date="1502193601">- Rebase to Ansible 2.3.2 release
- Resolves bz #1478867</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.2.0-2" date="1503576000">- Add a runtime dependency on python-passlib (bz #1484860).</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-1" date="1505476800">- Rebase to the Ansible 2.4.0.0 release (bz #1492477).</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-3" date="1505995200">- Require python-jmespath, needed for the json_query filter. bz #1484910</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-4" date="1507032000">- Backport patch for CVE-2017-7550 - PR#30875 rhbz#1473645</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-5" date="1507032001">- Backport a fix for the selinux module. Upstream github issue 30618</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.1.0-1" date="1510056000">- Sync with Fedora version 2.4.1.0-2, brings Ansible 2.4.1.0.
- Drop upstream patches.</changelog>
</package>
<package pkgid="38577fd155969ff58d16a8d42b18979c6bdfb0cf437556961fc82c423e93a228" name="ansible-doc" arch="noarch">
  <version epoch="0" ver="2.4.2.0" rel="2.el7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.2.0-0.1.rc5" date="1502193600">- Update to the latest release candidate of 2.3.2.0 (rc5)
- Drop the patch for issue 25933 (bz #1463440), it is included upstream.</changelog>
  <changelog author="Ryan Brown &lt;rybrown@redhat.com&gt; - 2.3.2.0-1" date="1502193601">- Rebase to Ansible 2.3.2 release
- Resolves bz #1478867</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.3.2.0-2" date="1503576000">- Add a runtime dependency on python-passlib (bz #1484860).</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-1" date="1505476800">- Rebase to the Ansible 2.4.0.0 release (bz #1492477).</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-3" date="1505995200">- Require python-jmespath, needed for the json_query filter. bz #1484910</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-4" date="1507032000">- Backport patch for CVE-2017-7550 - PR#30875 rhbz#1473645</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.0.0-5" date="1507032001">- Backport a fix for the selinux module. Upstream github issue 30618</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.1.0-1" date="1510056000">- Sync with Fedora version 2.4.1.0-2, brings Ansible 2.4.1.0.
- Drop upstream patches.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.2.0-1" date="1513684800">- Update to Ansible 2.4.2.0, unbreaks ansible-pull (bz #1506781, issue 31449)
- Claim ownership of the /usr/share/ansible/plugins dir (bz #1499847)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4.2.0-2" date="1516104000">- Bump Release to not conflict with EPEL</changelog>
</package>
<package pkgid="26f8fa2bf1374328666b028d2b0184c0c5fa1bd73e29cc213cc30463a07bb0b3" name="apr" arch="i686">
  <version epoch="0" ver="1.4.8" rel="3.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-2" date="1341576000">- pull fix for apr_mcast_hops from upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-3" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-4" date="1353585600">- update license</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-3.1" date="1509364800">- Resolves: #1507349 - CVE-2017-12613 apr: Out-of-bounds array deref
  in apr_time_exp*() functions</changelog>
</package>
<package pkgid="a5c11db1d9451347c60671fbb8ff80f25bd8f34d2e2cc605c628c5aa2487e719" name="apr" arch="x86_64">
  <version epoch="0" ver="1.4.8" rel="3.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-2" date="1341576000">- pull fix for apr_mcast_hops from upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-3" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-4" date="1353585600">- update license</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-3.1" date="1509364800">- Resolves: #1507349 - CVE-2017-12613 apr: Out-of-bounds array deref
  in apr_time_exp*() functions</changelog>
</package>
<package pkgid="f9cbbf704c6e45a1d7c07dc7e7ca2f476d4c87917776b7ab5d061f0fe014e144" name="apr-devel" arch="i686">
  <version epoch="0" ver="1.4.8" rel="3.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-2" date="1341576000">- pull fix for apr_mcast_hops from upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-3" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-4" date="1353585600">- update license</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-3.1" date="1509364800">- Resolves: #1507349 - CVE-2017-12613 apr: Out-of-bounds array deref
  in apr_time_exp*() functions</changelog>
</package>
<package pkgid="efb9ad80340162e2d3614a2b7f9f2ee6fd03a20ead73fa65a143b1a2bee41a60" name="apr-devel" arch="x86_64">
  <version epoch="0" ver="1.4.8" rel="3.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-2" date="1341576000">- pull fix for apr_mcast_hops from upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-3" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-4" date="1353585600">- update license</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-3.1" date="1509364800">- Resolves: #1507349 - CVE-2017-12613 apr: Out-of-bounds array deref
  in apr_time_exp*() functions</changelog>
</package>
<package pkgid="19060569e607cdc56efb00200befeda2bcbf53f226d968b7d879d6866c2eaf70" name="at" arch="x86_64">
  <version epoch="0" ver="3.1.13" rel="22.el7_4.2"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-13" date="1373544000">- rebuild with ? in dist
- Resolves: rhbz#983255</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-14" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22.2" date="1513771200">- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
</package>
<package pkgid="41af75c6072f0cb1884c6ab8faf283d40bc2d2275c023688989ceb54d064d69c" name="at-sysvinit" arch="x86_64">
  <version epoch="0" ver="3.1.13" rel="22.el7_4.2"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-13" date="1373544000">- rebuild with ? in dist
- Resolves: rhbz#983255</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-14" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22.2" date="1513771200">- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
</package>
<package pkgid="080a10377a91ec1a341b2d59e894d62061953272192b94b956da2072a0883897" name="augeas" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="391035c627939d5586710555abbfd58773c388c014bf1afa635f0bdac41e5ad1" name="augeas" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="1381bd1e7f0bb24bc3584ce2eeb02a6cb828b4c6ae353fb9ad17add303459665" name="augeas-devel" arch="i686">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="4556d6b874d620e4788f67c6cd0046b896441911cddc7cd7acac4c74b5009bc2" name="augeas-devel" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="57722fe9df07afa5472fe2ae2cda826f36e4c6a6bd0953354811a33e59e99f5a" name="augeas-devel" arch="i686">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="1d384a38e85596bcd67e679be363426a8977881f17ccaadf32bdf5e4736ebcb9" name="augeas-devel" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="ddcea65238e43d2d5e32c7c4ebb6950f40978566a9cc4c3fe3b9a5789727ad66" name="augeas-libs" arch="i686">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="b6252094be3a14ff3f59fbb898850f72d91ecc81b5b93b1ab866735f727bb74e" name="augeas-libs" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="300ad88ddb4e2c3071b69afe60013d19fa740085fb3b0f164329acf7f1b2cc4f" name="augeas-libs" arch="i686">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="0300c9e76e9632a22219fbb6d139fed317f346c3462ae7fd9882983692b54fa7" name="augeas-libs" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="3bb5340a16be554c14c582307cb8329aa103d2c5eeff3aa0dcee353e462d20b7" name="autocorr-af" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ca18a7a4e2e60673c22effd8de2b124b0d8d6de71fc5286d80b09225c75cf9f6" name="autocorr-bg" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="eeb88dcea73753274db5bf600d60cb9c67968dd623befad443e9dfc5f3afe493" name="autocorr-ca" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="fb659f59f7f9b461d8f69d62c12582bd30499aa4282f33efd814ebcc91156564" name="autocorr-cs" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="967b3c1c5e830ddecd5d0da2a03faf6ee4eb23d5f57ee47708f28a50676292cb" name="autocorr-da" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="71602d9dbbd61e753afe6ff05775d013a51bbfd969e944024297502b16c15db2" name="autocorr-de" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="22e20b003ebf8dde6f3e38fc78867e0abfbfdaab003e0849020631713c4e4e44" name="autocorr-en" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="457df29ce230e902459f8b07ae396e1c816efada9d50f92f1d17be540586c6ea" name="autocorr-es" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="bcdb3589d7796f0b19af14e2b152492ca62ff0af6432948a2f57612e934714fd" name="autocorr-fa" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="751a532a30e2c3d900a12524aeb9ce1e97bceaf435965a66ab7e8e687632d30f" name="autocorr-fi" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="30c6e9838d1f9395e2cdbd0eb3c8581c7ead4e723de0c3096729a45824505e87" name="autocorr-fr" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="468af0eba3b73ad00b7d6ef827039be58f89a7bc1ae061497f09d12fcc98882e" name="autocorr-ga" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ae5ddaa36c30aa387273c36dd6cd5fccbbd31a7448963bb46f424ee6550bb520" name="autocorr-hr" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5194b8900a6c2290452a2a1fe8fd60e66f8d8ce29e677fe7859caa5f7b77dbe0" name="autocorr-hu" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b2e90b96b3e89ab5711dd282efeae33d191603cd75df96a4b01bb41e44c3b9df" name="autocorr-is" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="979ff08d9c3865ca3452c64a077ffa479412319b6a043cffb677549ba43437b8" name="autocorr-it" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="730089bc407f8af77a26552353aaf911971421827f77a4ade3dd0d6a3da355fa" name="autocorr-ja" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="7788b2a25cc16334a1cd23647a714bbc4b12e11ffa9de61e23edd5679cbc65f8" name="autocorr-ko" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="fd92c47c00122ddb15e40278e6ed79fdc6898afc849275ac550d94047f9ae42c" name="autocorr-lb" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="04c26717c45cdca9444c96994bd598ecf3ac9a21f5200de73c24e9cf1da7d340" name="autocorr-lt" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="9b413eb844362eb5503b6ca5806d1b5642f3cec501f84a50e0d00fd854f0a514" name="autocorr-mn" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="3307824621ce6be36472698a9401fd64c2d8dd9e866117d75272f2fcde6d1136" name="autocorr-nl" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="e73bdfdcd0e1d645e214ba1ec791e895f943997be69b2abd96486caef0fc2211" name="autocorr-pl" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="895e3e85bceafe957e86ea0434bb52026eeed7ddc314a008176067120c9d2b65" name="autocorr-pt" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="11d08f485f6293d588352424a45f6602c07c08173cc74fec13156486e110e2ba" name="autocorr-ro" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="8ae1ab0451c73882bb5158a714447d3810cefea758199b5a025ea02b462f1f15" name="autocorr-ru" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="8106d482f863fe371cc4c15bf7707698e1d2b0d319824b019ef07efb97c41c4a" name="autocorr-sk" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="9ffa431156ab02d179ff314df80cbdd8203077649dde6d70683286ae24383593" name="autocorr-sl" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="46b84231c1938ed5ed1544bfc768f99c4ab3b5cd7ad65b43e67ce23c9a4d59a2" name="autocorr-sr" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="47059e0ac70a07b4ee2b0720a423b99d40769537ddd4247532e4c1a9e8cbb104" name="autocorr-sv" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="02a4e1e0701380e0a77428de164bfea178f3cd8dc52a95cb9aa2724924979f3b" name="autocorr-tr" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="cf953a87030bc8f18c50e181507b05a409414b93ed7e0789ebebcfa1be602fcd" name="autocorr-vi" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b79d27f0e031c8f9d7e9fde0714278b2c8b89f00b21b709e781e1775f0e74700" name="autocorr-zh" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="c268a0b7c53a7d0ff22002f74e622039635f8043575df336c886ed470ebe3ebe" name="autofs" arch="x86_64">
  <version epoch="1" ver="5.0.7" rel="70.el7_4.1"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011200">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4.1" date="1508414401">- bz1515311 - Automount cannot access host shares after a reboot [rhel-7.4.z]
  - reset master map list on startup retry.
- Resolves: rhbz#1515311</changelog>
</package>
<package pkgid="96571f0c987c51242477de3478b8ee4714de5753af25ad49dbad607f5def5e86" name="autofs" arch="x86_64">
  <version epoch="1" ver="5.0.7" rel="70.el7_4"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-60" date="1490011200">- bz1382093 - Improve logging in autofs
   - add the mount requestor's pid to pending_args.
   - create thread-local ID for mount attempts.
   - log functions to prefix messages with attempt_id if available.
   - factor out set_thread_mount_request_log_id().
   - add config option to use mount request log id.
- Resolves: rhbz#1382093</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011201">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
</package>
<package pkgid="b1b097d689921086b2b3900e6aec06be03af26123ba449811ba4a4cb56e7edf8" name="bash" arch="x86_64">
  <version epoch="0" ver="4.2.46" rel="29.el7_4"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-20" date="1468324800">- Fix a crash when lastpipe mode is enabled
  Resolves: #1326302</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-21" date="1476273600">- Fix a crash in trap signal handling
  Resolves: #1372806</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-22" date="1486641600">- Avoid crash in parameter expansion while expanding long strings
  Resolves: #1403255</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-23" date="1486641601">- Add a condition before setting pipeline_pgrp to shell_pgrp
  Resolves: #1377496</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-24" date="1486641602">- Recognize cd -e
  Resolves: #1267478</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-25" date="1486641603">- Plug a leak related to compound assignments
  Resolves: #1264101</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641604">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
</package>
<package pkgid="7257e4f2378b9a7efe8ecf592d54e2b618aecc6bcc952dbfad3d162c247d2c3e" name="bash-doc" arch="x86_64">
  <version epoch="0" ver="4.2.46" rel="29.el7_4"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-20" date="1468324800">- Fix a crash when lastpipe mode is enabled
  Resolves: #1326302</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-21" date="1476273600">- Fix a crash in trap signal handling
  Resolves: #1372806</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-22" date="1486641600">- Avoid crash in parameter expansion while expanding long strings
  Resolves: #1403255</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-23" date="1486641601">- Add a condition before setting pipeline_pgrp to shell_pgrp
  Resolves: #1377496</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-24" date="1486641602">- Recognize cd -e
  Resolves: #1267478</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-25" date="1486641603">- Plug a leak related to compound assignments
  Resolves: #1264101</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641604">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
</package>
<package pkgid="6d3b85fed5c0867d7823f23d88b004e6b01ed4b1a1cf465c687c94391cc6069f" name="bind" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="31b042ada35ea111afcbd4c2e58a9e8f3365b4969b0ef5e750ab68f833c57bd6" name="bind" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="3bdb6dbb3edea3695aba67fbb1b5cc5fd954228b3c963c562de4f9739553523e" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="d674531b1a86763c4cf635dc846f0fbf4430424bc91eccf0a6cd01d8955f277f" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="194849615c1325961e12821c3f814bf886d1db6155778675623a8bea310e936e" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="f0c9c9ce7177f315521ccc752ae7b106636dc1aa91e307452fd9552aaede168f" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="400c81a95306a63a7ce06eb60fc7b43b44ce6cd8fbbc473e56fd0aeed53eced4" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="b4a10d266574c8bffd94f8e12fe9478a9d47e3f8b7350b9340112d4631825a47" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="687f1fdd93074c62f0ad734738c5932b31b57767320367bed2b2f587208179e2" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="90329b3e11471e84a5aba5600a687c12820b5432cbcf1c133887fe9563cdafe1" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="1c898fa35233dae122fad631f86309e3b63c56a65c4c529732025e94fd7feee5" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="d3b71e4f9dde8b308ea7607ecf4de9a3b7b21736bcc151c9143ded7afe03d8b4" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="c549980825bc9ee7d68fbf1352a08547be75dd0d6d1015e2c70bc659c275fd4b" name="bind-libs-lite" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="8b1f80c47842a7b186b3738aeef2a882c63ed78ac7fbb552e7fe2d12d19b70e3" name="bind-libs-lite" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="a9177c075f7f903228c226111322488a5451d2d68c0fb1029477daa6533aea3a" name="bind-libs-lite" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="1846709fdc6c276872137523fa96b60189687c64fa1615637b9e0801cbae130e" name="bind-libs-lite" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="29d7bdb76147ed355dbb7484fe06525bc6cc871a7df0facb5f6d3679c99a051d" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="bcbf27e9ef50f877049c50b28b58e40e2cb9972cebe4168c84bce180f6cb14a9" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="14f7652f2088f2b85e9e8d9b243c74ab58c5fb2b505127bdd0aa5a43d3eb43fa" name="bind-lite-devel" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="08a94cd7a67fa6eed9506776d1ac5251fe237eafccdcdef12d2b932c9d7a9749" name="bind-lite-devel" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="6a32fa2f75012b37e8ba2f8661a2c237d22cd8c5ac8430b20dd60363703cfc11" name="bind-lite-devel" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="3875e8b4cbaff79e812c621ae6c82cee4ba17f67ba159a516dd82aa031469bfd" name="bind-lite-devel" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="2947e6f64f04ad4a4a55fd933d81f401eb39ba3ba85b584be0ee3ba82d2ed4a8" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="0c2b986cb6032d81a07967fdf53cb06a19e6acafd8f2439cf2e41ec944a5b03e" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="86dc83030dbf13f91eae9ba34486501e94b73db1db5d0458ab7d618db33286f2" name="bind-pkcs11-devel" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="ac9c3123f6fb7b1de47705b8650ca7a5336eef1e9313751f0c8adc58d14e13a7" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="a1bddd8af8bf6526162debeeab79ffb1d2c37ff70f59317ccc3d21fd93d945cc" name="bind-pkcs11-devel" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="8b3ed45df76100629c861585bc5473d4e87b906274573e2b13b12b48c54f4843" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="fd2fea81b548ebe80a6c3641d043585a11032d11ab7e6f93c7de72edf3cacba9" name="bind-pkcs11-libs" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="9a72a3619618405881bc339378b237f14e9d8d9f231db3b80d869f7ec2c4620c" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="5cd020a1f0dc653f9dff2f348b293e421b1776901cdef782e2bab5709632a1ac" name="bind-pkcs11-libs" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="cd3c957ebc2b076975c71b0bb06056ea6f0bd26758ad98a68febda36d80c7de8" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="2d2bdf1e6da0b4822b24dff3b0a8c8f5e07f13c6da802c7edfdaa297e1186891" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="303dce899baf3199100a48b94fa6e1a146335723ca7bf566a9d0c7ae594cd689" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="d4ac2174755d48055262613e973aed7473caf51750cd5ca67d056c4777ff1351" name="bind-sdb" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="35298edc4443c54eaca3924625c6a69f3e85026cb7a1083b2d4a235b17ce7c50" name="bind-sdb" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="38a94ba38ea5a9ff1a92c9337412455f2464ee531ad04d27a486674572d6f8f9" name="bind-sdb-chroot" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="4d85a779387b4f8dc3af068f2ba8490a645a8dc4b8bb35076cd8439f94b8135f" name="bind-sdb-chroot" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="9070f4a7ceb9028ce549d5e608ce58300a813299ec88582af066fb7ea5cc3be8" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="9437f28d32e2b7757df34a55e617ea3ea72bc28aa7e922fc204ec6ce2cb6fa56" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="65bc517e9da96f9b5ab9bf557d10e2761f1b95d4ec0c1462fbf39562ad448930" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-22-base" date="1470657600">- Fix date format bug in changelog which was preventing package build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
</package>
<package pkgid="7b038e5259cc30b973643055f80bda6d2c3b47b5880568af83f33f7ab2bec811" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.2"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.2" date="1511179200">- Fix a seg-fault in the PowerPC linker when discarding .plt sections when -pie is used and undefined weak symbols are present.  
  (#1515347)
- Add SCV, RFSCV amd LNIA instructions to Power9 port of gas.
  (#1449585)</changelog>
</package>
<package pkgid="b9333061a1ddcf5bdfa84a4347d8a5a885f554d97bb05c1fc18ca675e869b8c3" name="binutils-devel" arch="i686">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-22-base" date="1470657600">- Fix date format bug in changelog which was preventing package build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
</package>
<package pkgid="892e58bed2018da0a824ab8f09e58baf68dc15e0c04b35f33d167cf64a3cecc8" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-22-base" date="1470657600">- Fix date format bug in changelog which was preventing package build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
</package>
<package pkgid="2083724da9c2ab66e2bfc49ce1a661bd5a2e350f11e51e5144f55155abcdc69e" name="binutils-devel" arch="i686">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.2"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.2" date="1511179200">- Fix a seg-fault in the PowerPC linker when discarding .plt sections when -pie is used and undefined weak symbols are present.  
  (#1515347)
- Add SCV, RFSCV amd LNIA instructions to Power9 port of gas.
  (#1449585)</changelog>
</package>
<package pkgid="431664afc07da3b15c794cad2cc6e5d6559bd33a4d829dffe4ae433d8a4081d5" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.2"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.2" date="1511179200">- Fix a seg-fault in the PowerPC linker when discarding .plt sections when -pie is used and undefined weak symbols are present.  
  (#1515347)
- Add SCV, RFSCV amd LNIA instructions to Power9 port of gas.
  (#1449585)</changelog>
</package>
<package pkgid="64622f710416e731ca2b11c7db39dc2d87d0d30ded9df9950b11035d8f448aba" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="c12b304de7e93a300c3e500c2c530bf1b41f5572dfb99d774b694dd997f409c7" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="21b9f8e30a6ec7aeb52061560d1295f180ca2084cfd3709b03d7db9a8aad37a6" name="bluez-hid2hci" arch="x86_64">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="99a5fdc4f4675d713ce3bc0312c8667f894c760255043e12b258cd7e8af8c6f6" name="bluez-libs" arch="i686">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="ef174feae91ec8a73228865c9dbae9539eb4ff5b2f4e089e836dc5e96feb05ce" name="bluez-libs" arch="x86_64">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="4e75672f0976adb4c7c62f2e1c6317d40fa469890d0758b9685eaa96df8ff3bb" name="bluez-libs-devel" arch="i686">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="0e78b07d0cf05cd651c0bad97f9ebb0b2ec7228702153750f7f6cf411544f6ea" name="bluez-libs-devel" arch="x86_64">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="bfe2d64bda99eb8cc6ffdd37084a1f1fa230112c63c846fde5e32e215211bf9c" name="container-selinux" arch="noarch">
  <version epoch="2" ver="2.21" rel="2.gitba103ac.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.9-4" date="1487678400">- Resolves: #1425574
- built commit 79a6d70</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2:2.10-1" date="1488801600">- Update to the latest container-selinux patch from upstream
- Label files under /usr/libexec/lxc as container_runtime_exec_t
- Give container_t access to XFRM sockets
- Allow spc_t to dbus chat with init system
- Allow containers to read cgroup configuration mounted into a container</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2:2.10-2.1" date="1490011200">- Make sure we have a late enough version of policycoreutils</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.15-1.1" date="1496750400">- Resolves: #1451289
- rebase to v2.15
- built @origin/RHEL-1.12 commit 583ca40</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2:2.19-1" date="1497441600">- Fix mcs transition problem on stdin/stdout/stderr
- Add labels for CRI-O
- Allow containers to use tunnel sockets</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.19-2.1" date="1497441601">- update release tag to isolate from 7.3</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:2.20-1.1" date="1499169600">- rebase</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.20-2" date="1499688000">- Resolves: #1463549
- built commit 532fa20</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.21-1" date="1500465600">- Resolves: #1469661
- bump to v2.21
- built commit 333854a</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.21-2.gitba103ac" date="1502193600">- Resolves: #1469792
- built @origin/RHEL-1.12 commit ba103ac</changelog>
</package>
<package pkgid="4681822ffc3a99c9acf948a2bf4ce3526a52414422c312be66f70b49ba23fd86" name="container-selinux" arch="noarch">
  <version epoch="2" ver="2.28" rel="1.git85ce147.el7"/>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2:2.10-2.1" date="1490011200">- Make sure we have a late enough version of policycoreutils</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.15-1.1" date="1496750400">- Resolves: #1451289
- rebase to v2.15
- built @origin/RHEL-1.12 commit 583ca40</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2:2.19-1" date="1497441600">- Fix mcs transition problem on stdin/stdout/stderr
- Add labels for CRI-O
- Allow containers to use tunnel sockets</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.19-2.1" date="1497441601">- update release tag to isolate from 7.3</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:2.20-1.1" date="1499169600">- rebase</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.20-2" date="1499688000">- Resolves: #1463549
- built commit 532fa20</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.21-1" date="1500465600">- Resolves: #1469661
- bump to v2.21
- built commit 333854a</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.21-2.gitba103ac" date="1502193600">- Resolves: #1469792
- built @origin/RHEL-1.12 commit ba103ac</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.24-1.gitaeff029" date="1506427200">- bump to v2.24</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2:2.28-.git85ce147" date="1507550400">- bump to v2.28</changelog>
</package>
<package pkgid="6b813ffd4962652b2bf7ca2428372e55ad0de341c56f3b801a21e8b0a2c67f64" name="container-selinux" arch="noarch">
  <version epoch="2" ver="2.33" rel="1.git86f33cd.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.20-2" date="1499688000">- Resolves: #1463549
- built commit 532fa20</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.21-1" date="1500465600">- Resolves: #1469661
- bump to v2.21
- built commit 333854a</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.21-2.gitba103ac" date="1502193600">- Resolves: #1469792
- built @origin/RHEL-1.12 commit ba103ac</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.24-1.gitaeff029" date="1506427200">- bump to v2.24</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2:2.28-1.git85ce147" date="1507550400">- bump to v2.28</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2:2.30-1.git7f2de1a" date="1507723200">- bump to v2.30
- Allow containers to create files on tmpfs file systems
- Dontaudit containers attempts to write to /proc</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2:2.30-2.git7f2de1a" date="1508932800">- Relabel /etc/docker directory</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2.31-1" date="1509019200">- Allow the container runtime to dbus chat with dnsmasq
- add dontaudit rules for container trying to write to /proc</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2.32-1" date="1510142400">- Make sure users creating content in /var/lib with right labels</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2.33-1" date="1510142401">- Allow containers to read /etc/resolv.conf and /etc/hosts if volume
- mounted into container.</changelog>
</package>
<package pkgid="ded20232af3b2cd0f9e5c830bf620aba295ad06a77cd6314f267f963ee042767" name="container-selinux" arch="noarch">
  <version epoch="2" ver="2.36" rel="1.gitff95335.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.21-1" date="1500465600">- Resolves: #1469661
- bump to v2.21
- built commit 333854a</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.21-2.gitba103ac" date="1502193600">- Resolves: #1469792
- built @origin/RHEL-1.12 commit ba103ac</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.24-1.gitaeff029" date="1506427200">- bump to v2.24</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2:2.28-1.git85ce147" date="1507550400">- bump to v2.28</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2:2.30-1.git7f2de1a" date="1507723200">- bump to v2.30
- Allow containers to create files on tmpfs file systems
- Dontaudit containers attempts to write to /proc</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2:2.30-2.git7f2de1a" date="1508932800">- Relabel /etc/docker directory</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2.31-1" date="1509019200">- Allow the container runtime to dbus chat with dnsmasq
- add dontaudit rules for container trying to write to /proc</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2.32-1" date="1510142400">- Make sure users creating content in /var/lib with right labels</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2.33-1" date="1510142401">- Allow containers to read /etc/resolv.conf and /etc/hosts if volume
- mounted into container.</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2.36-1" date="1511870400">- Allow containers to relabelto/from all file types to container_file_t
- Allow container to map chr_files labeled container_file_t</changelog>
</package>
<package pkgid="2c82a6242a41cf839f5ce4a20ffc0788a1b1e308ebf3cfbffb24da7800321c9e" name="container-selinux" arch="noarch">
  <version epoch="2" ver="2.42" rel="1.gitad8f0f7.el7"/>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2.31-1" date="1509019200">- Allow the container runtime to dbus chat with dnsmasq
- add dontaudit rules for container trying to write to /proc</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2.32-1" date="1510142400">- Make sure users creating content in /var/lib with right labels</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2.33-1" date="1510142401">- Allow containers to read /etc/resolv.conf and /etc/hosts if volume
- mounted into container.</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2.36-1" date="1511870400">- Allow containers to relabelto/from all file types to container_file_t
- Allow container to map chr_files labeled container_file_t</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2.37-1" date="1513080000">- Allow containers to use inherited ttys
- Allow ostree to handle labels under /var/lib/containers/ostree</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2.38-1" date="1515240000">- Allow container runtimes to mmap container_file_t devices
- Add labeling for rhel push plugin</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2.39-1" date="1515412800">- Allow container runtimes to use interited terminals.  This helps
satisfy the bounds check of container_t versus container_runtime_t.</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2.40-1" date="1515499200">- Allow container_runtime_t to use user ttys
- Fixes bounds check for container_t</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2.41-1" date="1516276800">- Add typebounds calls for container_runtime_t on spc_t and svirt_lxc_net_t</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@fedoraproject.org&gt; - 2.42-1" date="1519300800">- Remove typebounds access rules</changelog>
</package>
<package pkgid="7e0e76746aa09ca87e77b6c0e6a3f6e3d0353f48d2b843de6f7ea2c3498d936e" name="container-storage-setup" arch="noarch">
  <version epoch="0" ver="0.7.0" rel="1.git4ca59c5.el7"/>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 0.1.0-1" date="1488196800">- Initial version of container-storage-setup
- Building to push through the fedora release cycle</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 0.1.0-2" date="1488456000">- Resolves: #1427295 - initial package on rawhide
- misc macro changes
- preserve timestamps</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 0.2.0-1" date="1488542400">- Add License
- Add compatibility mode flag to only do docker specific stuff if INPUTFILE
not specified.
- Minor Bug fixes for non docker use cases</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.2.0-2" date="1493812800">- built commit 8276a1e</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.2.0-3.git8276a1e" date="1493812801">- add shortcommit to release tag</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.3.0-1.git8276a1e" date="1493899200">- use correct version tag, no change in source</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.3.0-1.git9b77bcb" date="1497355200">- built commit 9b77bcb</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.3.0-3.git927974f" date="1498824000">- rebase, #1466508</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.6.0-1.gite67c964" date="1502193600">- rebase to v0.6.0</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.7.0-1.git4ca59c5" date="1505908800">- bump to v0.7.0
- built commit 4ca59c5</changelog>
</package>
<package pkgid="ae15a138e45f1f73871ece28929bf1feb655a5fd83e6a4648de65dba7b81df1a" name="container-storage-setup" arch="noarch">
  <version epoch="0" ver="0.8.0" rel="3.git1d27ecf.el7"/>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 0.2.0-1" date="1488542400">- Add License
- Add compatibility mode flag to only do docker specific stuff if INPUTFILE
not specified.
- Minor Bug fixes for non docker use cases</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.2.0-2" date="1493812800">- built commit 8276a1e</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.2.0-3.git8276a1e" date="1493812801">- add shortcommit to release tag</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.3.0-1.git8276a1e" date="1493899200">- use correct version tag, no change in source</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.3.0-1.git9b77bcb" date="1497355200">- built commit 9b77bcb</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.3.0-3.git927974f" date="1498824000">- rebase, #1466508</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.6.0-1.gite67c964" date="1502193600">- rebase to v0.6.0</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.7.0-1.git4ca59c5" date="1505908800">- bump to v0.7.0
- built commit 4ca59c5</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.7.0-2.git4ca59c5" date="1509019200">- Requires: parted
- Resolves: #1416928</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.8.0-3.git1d27ecf" date="1509451200">- rebased to 1d27ecf705a964b4d96ec815120359eeec1fea50</changelog>
</package>
<package pkgid="c5458817e942649e9a2dcb9782de4c96834d2f66e1f2f84d32389f2028cdab3d" name="copy-jdk-configs" arch="noarch">
  <version epoch="0" ver="2.2" rel="5.el7_4"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1452254400">- pretrasn lua call now done in pcall (protected call)
- also posttrans now always return 0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462400">- inital commit to rhel
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462401">- commented requires on lua posix to stop blocking composes.
- changed it to 644 to dont mislead by executable flags
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-4" date="1510833600">- added an daplied in install patch1: newPolices.patch
- Resolves: rhbz#1513697</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-5" date="1511265600">- adapted (added policy subdir) patch1: newPolices.patch
- Resolves: rhbz#1513697</changelog>
</package>
<package pkgid="96bedb07495d9f48470fd2b738911c14abb285125ecbc3602822588d8d863b05" name="corosync" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="aeeea106f061b084a2d2ee8c8f792b3c1650bcd70062a7b5a87f0e62388d26d5" name="corosync-qdevice" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="399886ea0d381f46a6d2419da4f23b7903b1a07bc3bedb7d54851ad556661a41" name="corosync-qnetd" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="72123e97b70d99777ed678308a5422c81b729c68d81bb226d02857f69f32ca4c" name="corosynclib" arch="i686">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="05304dad029a84de9b4278ce2fc3e9ebbe0dc36a3dc591322a07d494cb6e9e4a" name="corosynclib" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="2993f9488fe962ff740ea1104606b2001c89eccde809184bafba0edcca73fd5d" name="corosynclib-devel" arch="i686">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="68d219aade48c0d6aa46bbc2d131545acb16b27831514c9e75dd82a8dd3816f1" name="corosynclib-devel" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="3435bdf96259066ece2d7f0c23592c2cbe9c1807548083dae8215a5f5a621799" name="cpio" arch="x86_64">
  <version epoch="0" ver="2.11" rel="25.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.11-16" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-17" date="1363003200">- fix small memory leak in copyin.c (#919454)
- remove %defattr and install 'cpio' to real %{_bindir}
- CovScan: add %{?_rawbuild}</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-18" date="1363089600">- explicitly provide /bin/cpio for packages that are dependant on this file</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-19" date="1363348800">- revert the fix for memory leak (at least for now) #921725</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-20" date="1364385600">- fix another bogus date in changelog
- update config.guess/config.sub for aarm64 build (#925189)
- run autoreconf instead of autoheader</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.11-21" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.11-22" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-23" date="1432123200">- better check for read() error (rhbz#1138148)
- fix ru translation (rhbz#1075513)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-24" date="1436356800">- fix for CVE-2014-9112</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-25" date="1486382400">- fix crc checksum for files ~200M+ (rhbz#1415081)</changelog>
</package>
<package pkgid="589f1172a80959071b60e6eaa2c68251e6040cb9ec01767d11252f1ddaa78ad0" name="cpp" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="ecc818d5b3c4c1c05bb01a9f96b24484b91d79a3b791138d998be06e9fdd4587" name="cpp" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="246d4fe06275e7c875c6e6229b209c6ba1325bddae9f12c5e04e825ac071c327" name="cryptsetup" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="b48bf20591ed3a0ff7209bbd86933afabf3edce8127bfeb967abca257a7070c7" name="cryptsetup-devel" arch="i686">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="65e5bfe5007941d7d83014203561f7ebfa73cbcba5a5a7d95f8d57f8de82b65b" name="cryptsetup-devel" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="eaa92643f07d996779a8afa261e42f782e9b1a2292f657dca7ef0f4e05e6591b" name="cryptsetup-libs" arch="i686">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="22d632707bc0960e6a9c2ac31efd44f2d79a31fb24759d99310d276fc37a465f" name="cryptsetup-libs" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="3d710f24020b07ab0ee19119e514a23ef1d442cac15710580ba1dd8d77610fa9" name="cryptsetup-python" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="4afe95c93ef7f5d4ec6ae7916578265094101b5be1a780950ac60623297ea993" name="cryptsetup-reencrypt" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="073d7f7a99b582e55331c90af53a54e755c1e08668dc26ac0784fcb0eaa91526" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="b7f67056f7fcd50223418c180db6389d23ed9254c483d2d2bb969939537547a1" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="4979651bad58a694ddb02f72a78d2034bcd6c8bd38d7501637ba87eb3d623ea9" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="06285374150d9754f13e43dc7e0816fe4476ad9a1ddd5f385eca5bd97bdca815" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="66c0d196a27af3cf9ae105d43c7523a11e497e2caa206853ddaafa6910802e0a" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="e3dffbbf1ba2a3e8e669598cc08b66fd27d19244cba62bf301e50d6923a968e0" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="50dd6a57941c7a3024b6e84736b665786ac42c473758b87621f0213d2270968a" name="curl" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="3cdef24eb27e5e164ac8d9213280aa60a0a334369b5dd0f5bcaad3a3fe8d6172" name="debugmode" arch="x86_64">
  <version epoch="0" ver="9.49.39" rel="1.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.31-1" date="1465819200">- ipv6: wait for all global IPv6 addresses to leave the "tentative" state
- source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
- ifup-aliases: inherit ARPCHECK from parent device
- rhel-dmesg: don't start in containers
- ifup-eth: fix typo in error message (#1038776)
- sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
- rwtab: /var/lib/nfs needs to copy the files
- functions: improve killing loops
- ipcalc: detect invalid mask
- ifup: set valid_lft and preferred_lft to forever for static ip
- service: use systemd mangle for given service
- ifup-post: check resolve.conf also with DNS2
- ifdown-post: remove resolv.conf only in specific cases
- spec: ghost /var/log/dmesg
- network-functions: is_available_wait should wait even in the case that is_available returns 2
- autorelabel: turn quota off before relabeling
- autorelabel: call dracut-initramfs-restore before forced reboot</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.32-1" date="1466683200">- ifup-eth: fix setting preferred_lft and valid_lft</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1.el7_4.1" date="1509710400">- ARUPDATE option introduced</changelog>
</package>
<package pkgid="70f2bbaf15759be5d61c53f946b860c9e843f2537b5c518ed26bff8c89e444cf" name="device-mapper-multipath" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="ea9abb3e2a501a854c2333ac0b78db76ea92c4cc645df959c2b7da2c49fcfeb7" name="device-mapper-multipath-devel" arch="i686">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="b6bbe31ead7d6d0907f25512cf86c669116025fba6c2e1029cc8f9ad4a1a1a0e" name="device-mapper-multipath-devel" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="fecd4e247e31f9a082a0a5b9876ec71cee2dc2b6824bb709cd0c19eb70aad102" name="device-mapper-multipath-libs" arch="i686">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="5411ebaa617f9872fb148c850a8a2549a0788db2e4844282a3ba316783c29fce" name="device-mapper-multipath-libs" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="18dcab4bd4abff36b135981a22bcf5feb57c191337122e0faae03e7fbd9ed1bb" name="device-mapper-multipath-sysvinit" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="54950c0ffd20b3e7f9f51878a1c0ac7d2e5846b59a96bb4ad572500b5bd03439" name="device-mapper-persistent-data" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="0.1.rc6.el7_4.1"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc6" date="1457524800">- Add new fields to thin_ls: MAPPED_BYTES, EXCLUSIVE_BYTES and SHARED_BYTES.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc8" date="1462363200">- Fixes for thin_trim and thin_repair.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-1" date="1468238400">- Fixes providing proper use of compiler flags.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-2" date="1469102400">- Improve documentation and messages on output file preallocation
  when using thin_repair and thin_restore.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.3-1" date="1469188800">- Fix regression in thin_repair and thin_restore so it works again
  when using device as output.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc3" date="1489665600">- Update to latest upstream release including various bug fixes and new features.
- New thin_show_duplicates command.
- Add '--skip-mappings' and '--format custom' options to thin_dump.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc4" date="1490097600">- Add support for cache metadata format version 2 in cache tools.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc5" date="1490184000">- Switch to a faster implementation of crc32 used for checksums.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc6" date="1490616000">- Don't open devices as writeable if --clear-needs-check-flag is not set.
- Fix cache metadata format version 2 superblock packing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.0-0.1-rc6.el7_4.1" date="1511179200">- Fix v2 metadata corruption in cache_restore.</changelog>
</package>
<package pkgid="b0c7aae86afbbf7027a6d57682ca1cb6144ef0ddf273ba43d977a5d8ef0e2eb4" name="dhclient" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-48" date="1487246400">- Resolves: #1302282 - systemd fails to keep dhcpd running after repeated
  restarts by NetworkManager dispatcher.d script</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246401">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246402">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
</package>
<package pkgid="cdf7a09b53b5131819b9f0d074e0ac452f8de530b257e61ac6e5362152c65aa8" name="dhclient" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246400">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
</package>
<package pkgid="074e4797ede93d4c191361b915f3e6f1e9a95636cbf1fc45b59454b0073eb3b6" name="dhclient" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.4"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
</package>
<package pkgid="5a7f8da70f47a500dee7dd57658944b4f1b8b2883de87266a21c9ee4a7db6dfb" name="dhcp" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-48" date="1487246400">- Resolves: #1302282 - systemd fails to keep dhcpd running after repeated
  restarts by NetworkManager dispatcher.d script</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246401">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246402">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
</package>
<package pkgid="3aeaeada8b1ca4f146b2ae4aa639906fc3e799bc7e73770d9f1489fa45e375b6" name="dhcp" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246400">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
</package>
<package pkgid="a356bcf6025c5bb33492e28913dfa6164db5f4a4f7f9bb01d18fedea93513dd8" name="dhcp" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.4"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
</package>
<package pkgid="b53db285a22a1a92d2fe5acf8500571f6bd727b17aff69cfc4fb814cee2ce0ca" name="dhcp-common" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-48" date="1487246400">- Resolves: #1302282 - systemd fails to keep dhcpd running after repeated
  restarts by NetworkManager dispatcher.d script</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246401">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246402">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
</package>
<package pkgid="608b351cebbbcc613629a052a20769ffd227d37091889e80014be2dcad62e4c7" name="dhcp-common" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246400">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
</package>
<package pkgid="cee14aa825b10ebcad1777fb736dc0439eb1ac38d7f9bce79f2d816ae2bff359" name="dhcp-common" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.4"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
</package>
<package pkgid="08a774f7e548b74a5ba6dcb8ad067ec974778d032c9c6ab92dfd0ec8c9e56d60" name="dhcp-devel" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-48" date="1487246400">- Resolves: #1302282 - systemd fails to keep dhcpd running after repeated
  restarts by NetworkManager dispatcher.d script</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246401">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246402">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
</package>
<package pkgid="ae5d5e678012e3accd0f264ca8e418556837595dd3073ccfa92c855e11322b0d" name="dhcp-devel" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-48" date="1487246400">- Resolves: #1302282 - systemd fails to keep dhcpd running after repeated
  restarts by NetworkManager dispatcher.d script</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246401">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246402">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
</package>
<package pkgid="df423d1d9abab76d9c6629b819356ec92ee739d5ac971653557fd380a732c3a6" name="dhcp-devel" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246400">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
</package>
<package pkgid="d13dd5fa7fb1df407e6d11c5373428d69c1c4b9715bc3ec17f37d4c2517a0d5b" name="dhcp-devel" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246400">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
</package>
<package pkgid="bec63c11985996cf7e4e6a94e095a5a1d3a287b9bd83fd3f90dd257b428ec8eb" name="dhcp-devel" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.4"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
</package>
<package pkgid="fded7657726d39ea2ed805e9df753ace192b13c23e239fc39e41e36d35d37525" name="dhcp-devel" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.4"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
</package>
<package pkgid="b85b9bd4f485b0d756d19ed22185883031d6b62925084859adf1bb44abaa6760" name="dhcp-libs" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-48" date="1487246400">- Resolves: #1302282 - systemd fails to keep dhcpd running after repeated
  restarts by NetworkManager dispatcher.d script</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246401">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246402">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
</package>
<package pkgid="5eccdbd22733104ffd641191b052dd294554ad616549baca689ef244e53c51ca" name="dhcp-libs" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-48" date="1487246400">- Resolves: #1302282 - systemd fails to keep dhcpd running after repeated
  restarts by NetworkManager dispatcher.d script</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246401">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246402">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
</package>
<package pkgid="41c0edd0c20ce5421bf0d9d62b96e197cc06dbf18f9deb4042c8882bc5da1686" name="dhcp-libs" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246400">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
</package>
<package pkgid="9e451fff84a77114c38cebb96d127c0da7f437eeba853b263a4afc038a76ea56" name="dhcp-libs" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246400">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
</package>
<package pkgid="8d8b05106cc8e33fec1af87a2f79f6ae2379a28fa6ca21b8a0464c397961bc31" name="dhcp-libs" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.4"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
</package>
<package pkgid="92909c5375b10d8911323d6df9ab87de274943552e26fc663c24423cc71b1679" name="dhcp-libs" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.4"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
</package>
<package pkgid="195e446a2353100d393fe8ef245e058bd398f57a0330c0a676508016e19f2e58" name="dleyna-server" arch="i686">
  <version epoch="0" ver="0.5.0" rel="2.el7_4"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.4.0-1" date="1433246400">- Initial RHEL import
Resolves: #1219532</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-1" date="1488542400">- Update to 0.5.0
Resolves: #1386847</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-2" date="1507204800">- Use arch-specific Requires on dleyna-connector-dbus
Resolves: #1479486</changelog>
</package>
<package pkgid="48d7278ee76dc0bfd1d4168b3f4449941120822c891eca5e35c1b5abc72dedaa" name="dleyna-server" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="2.el7_4"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.4.0-1" date="1433246400">- Initial RHEL import
Resolves: #1219532</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-1" date="1488542400">- Update to 0.5.0
Resolves: #1386847</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-2" date="1507204800">- Use arch-specific Requires on dleyna-connector-dbus
Resolves: #1479486</changelog>
</package>
<package pkgid="6988a5e50472adf2cde8d07648b43d9415c5762866835ff4ec4b2329bcc7ee68" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.76" rel="2.el7_4.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-16" date="1464609600">- Resolves: #1275626 - use the patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-17" date="1464696000">- Resolves: #1275626 - modify the patch using new information</changelog>
  <changelog author="root - 2.66-18" date="1472212800">- Resolves: #1358427 - dhcp errors with hostnames beginning with numbers</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-19" date="1473163200">- Resolves: #1367772 - dns not updated after sleep and resume laptop</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-20" date="1473336000">- Related: #1367772 - additional upstream patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-21" date="1473768000">- Related: #1367772 - fix dns server update</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-1" date="1487678400">- Rebase to 2.76 (#1375527)
- Include also dhcp_release6 (#1375569)
- Fix compilation warnings
- Correct manual about interface aliases, warn if used without --bind*</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.1" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.2" date="1506513600">- Small correction of CVE-2017-14491</changelog>
</package>
<package pkgid="f2b9c1878596d7ca7c260f7e6e2c6c22073b3bdf241ffdd0b108d72b84aeffa8" name="dnsmasq-utils" arch="x86_64">
  <version epoch="0" ver="2.76" rel="2.el7_4.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-16" date="1464609600">- Resolves: #1275626 - use the patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-17" date="1464696000">- Resolves: #1275626 - modify the patch using new information</changelog>
  <changelog author="root - 2.66-18" date="1472212800">- Resolves: #1358427 - dhcp errors with hostnames beginning with numbers</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-19" date="1473163200">- Resolves: #1367772 - dns not updated after sleep and resume laptop</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-20" date="1473336000">- Related: #1367772 - additional upstream patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-21" date="1473768000">- Related: #1367772 - fix dns server update</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-1" date="1487678400">- Rebase to 2.76 (#1375527)
- Include also dhcp_release6 (#1375569)
- Fix compilation warnings
- Correct manual about interface aliases, warn if used without --bind*</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.1" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.2" date="1506513600">- Small correction of CVE-2017-14491</changelog>
</package>
<package pkgid="55066ce0e5649b1507ad9dfc098353dcc27f115696da7fb7b846093b0fffaaad" name="docker" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="55.gitc4618fb.el7"/>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 2:1.12.6-46.git1680dd8" date="1500465600">- rebased runc to 79c3939053c870fbb4de5484d98640d5ba028ef4, #1471803</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-47.git0fdc778" date="1500465601">- Resolves: #1471218
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 4f960ae</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-48.git0fdc778" date="1500552000">- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-49.git0fdc778" date="1500984000">- changed permissions of /var/lib/docker and /etc/sysconfig/docker-storage, #1473785</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-50.git0fdc778" date="1501675200">- Resolves: #1428142, #1454371, #1454420, #1456184, #1470261, #1430905
- Resolves: #1446526, #1450221, #1451474, #1459268, #1461024, #1461071
- Resolves: #1464188, #1466242, #1464933, #1470640
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-51.gitc4618fb" date="1502193600">- Resolves: #1472974
- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-52.gitc4618fb" date="1502798400">- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 299e781</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-53.gitc4618fb" date="1503403200">- Resolves: #1484146
- need container-selinux &gt;= 2:2.21-2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-54.gitc4618fb" date="1503403201">- built oci-umount commit 8377044
- ensure diff between 1.12.6-51 and latest is only container-selinux NVR</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-55.gitc4618fb" date="1503576000">- Resolves: #1477787
- built oci-umount commit 6f0317a</changelog>
</package>
<package pkgid="b6f0bbe2827f516bfb6bb7249bf84d0fe9aac22d288010a5236d6d9960b0c19d" name="docker" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="61.git85d7426.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-52.gitc4618fb" date="1502798400">- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 299e781</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-53.gitc4618fb" date="1503403200">- Resolves: #1484146
- need container-selinux &gt;= 2:2.21-2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-54.gitc4618fb" date="1503403201">- built oci-umount commit 8377044
- ensure diff between 1.12.6-51 and latest is only container-selinux NVR</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-55.gitc4618fb" date="1503576000">- Resolves: #1477787
- built oci-umount commit 6f0317a</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-56.git638a809" date="1505736000">- built docker @projectatomic/docker-1.12.6 commit 638a809
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 21c84aa</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-57.git85d7426" date="1505908800">- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-58.git85d7426" date="1505995200">- Resolves: #1455071
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-59.git85d7426" date="1506081600">- reverted sources, the same file name should not have a different hash</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-60.git85d7426" date="1506427200">- Resolves: #1475768
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-61.git85d7426" date="1506427201">- reverted sources, the same file name should not have a different name</changelog>
</package>
<package pkgid="55edf778ebe4bfdc716c6ac8fe6a4aaae0a82eba643dc4c62850882df38844e7" name="docker" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="68.gitec8512b.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-59.git85d7426" date="1506081600">- reverted sources, the same file name should not have a different hash</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-60.git85d7426" date="1506427200">- Resolves: #1475768
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-61.git85d7426" date="1506427201">- reverted sources, the same file name should not have a different name</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-62.git85d7426" date="1508414400">- rhel subscription secrets info moved to skopeo-containers
- require skopeo-containers &gt;= 0.1.24-3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-63.git6f58874" date="1509624000">- built docker @projectatomic/docker-1.12.6 commit 6f58874
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-64.git61aa37c" date="1509710400">- Resolves: #1498553
- built docker @projectatomic/docker-1.12.6 commit 61aa37c
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-65.git61aa37c" date="1510056000">- adjust sources file</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-66.gitd6f7b83" date="1510228800">- built docker @projectatomic/docker-1.12.6 commit d6f7b83
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-67.gitec8512b" date="1510228801">- built docker @projectatomic/docker-1.12.6 commit ec8512b
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-68.gitec8512b" date="1510833600">- revert some docker.sysconfig deletions wrongly done in commit 3b003db</changelog>
</package>
<package pkgid="bda8bc6e466b0460cbf3d3908b44e151d9dec43974e83d5a6682076d7590818f" name="docker" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="71.git3e8e77d.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-62.git85d7426" date="1508414400">- rhel subscription secrets info moved to skopeo-containers
- require skopeo-containers &gt;= 0.1.24-3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-63.git6f58874" date="1509624000">- built docker @projectatomic/docker-1.12.6 commit 6f58874
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-64.git61aa37c" date="1509710400">- Resolves: #1498553
- built docker @projectatomic/docker-1.12.6 commit 61aa37c
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-65.git61aa37c" date="1510056000">- adjust sources file</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-66.gitd6f7b83" date="1510228800">- built docker @projectatomic/docker-1.12.6 commit d6f7b83
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-67.gitec8512b" date="1510228801">- built docker @projectatomic/docker-1.12.6 commit ec8512b
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-68.gitec8512b" date="1510833600">- revert some docker.sysconfig deletions wrongly done in commit 3b003db</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-69.gitec8512b" date="1511352000">- use oci-register-machine &gt;= 1:0-3.14</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-70.gitec8512b" date="1513080000">- Resolves: #1524634 - start daemon after registries.service</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-71.git3e8e77d" date="1513166400">- rebased to 3e8e77dcb88db0530c839b249bea7d75f9cd01d7
- https://bugzilla.redhat.com/show_bug.cgi?id=1518519</changelog>
</package>
<package pkgid="57119ecfc03d87a85225a3a69a7322784a885a139666459917e60d38867ba544" name="docker" arch="x86_64">
  <version epoch="2" ver="1.13.1" rel="53.git774336d.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-71.git3e8e77d" date="1513166400">- rebased to 3e8e77dcb88db0530c839b249bea7d75f9cd01d7
- https://bugzilla.redhat.com/show_bug.cgi?id=1518519</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-1.gitddee18e" date="1516795200">- built docker @projectatomic/docker-1.13.1-rhel commit ddee18e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 5ab4ab8</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-43.gitec9911e" date="1517313600">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-44.gitec9911e" date="1517486400">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-45.gitec9911e" date="1517486401">- c-s-s &gt;= 0.7.0-1</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-46.gitec9911e" date="1517832000">- Resolves: #1542112 - depend on oci-register-machine (disabled in config file)
- revert removal of oci-register-machine done in 2:1.13.1-1</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-47.gitec9911e" date="1517832001">- oci-register-machine &gt;= 1:0-5.13 (RE: #1542112)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-48.gitec9911e" date="1517832002">- Resolves: #1536726 - bump skopeo-containers dependency</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-52.gitce62987" date="1518436800">- Resolves: #1534827, #1543575
- built docker @projectatomic/docker-1.13.1-rhel commit ce62987
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 1ba8194</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-53.git774336d" date="1519128000">- Resolves: #1540540
- built docker @projectatomic/docker-1.13.1-rhel commit 774336d
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 5b117de
- built libnetwork commit 14db3c4</changelog>
</package>
<package pkgid="5a802d043b6fa0fe640c5afcadc3557211210ea5ac2e8124db58fb00da8a0596" name="docker-client" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="55.gitc4618fb.el7"/>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 2:1.12.6-46.git1680dd8" date="1500465600">- rebased runc to 79c3939053c870fbb4de5484d98640d5ba028ef4, #1471803</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-47.git0fdc778" date="1500465601">- Resolves: #1471218
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 4f960ae</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-48.git0fdc778" date="1500552000">- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-49.git0fdc778" date="1500984000">- changed permissions of /var/lib/docker and /etc/sysconfig/docker-storage, #1473785</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-50.git0fdc778" date="1501675200">- Resolves: #1428142, #1454371, #1454420, #1456184, #1470261, #1430905
- Resolves: #1446526, #1450221, #1451474, #1459268, #1461024, #1461071
- Resolves: #1464188, #1466242, #1464933, #1470640
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-51.gitc4618fb" date="1502193600">- Resolves: #1472974
- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-52.gitc4618fb" date="1502798400">- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 299e781</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-53.gitc4618fb" date="1503403200">- Resolves: #1484146
- need container-selinux &gt;= 2:2.21-2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-54.gitc4618fb" date="1503403201">- built oci-umount commit 8377044
- ensure diff between 1.12.6-51 and latest is only container-selinux NVR</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-55.gitc4618fb" date="1503576000">- Resolves: #1477787
- built oci-umount commit 6f0317a</changelog>
</package>
<package pkgid="564d3301e447dd2d54fea9c27fbdb9b18dbb7daa95ecc23f979c2e5714ba6adf" name="docker-client" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="61.git85d7426.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-52.gitc4618fb" date="1502798400">- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 299e781</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-53.gitc4618fb" date="1503403200">- Resolves: #1484146
- need container-selinux &gt;= 2:2.21-2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-54.gitc4618fb" date="1503403201">- built oci-umount commit 8377044
- ensure diff between 1.12.6-51 and latest is only container-selinux NVR</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-55.gitc4618fb" date="1503576000">- Resolves: #1477787
- built oci-umount commit 6f0317a</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-56.git638a809" date="1505736000">- built docker @projectatomic/docker-1.12.6 commit 638a809
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 21c84aa</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-57.git85d7426" date="1505908800">- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-58.git85d7426" date="1505995200">- Resolves: #1455071
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-59.git85d7426" date="1506081600">- reverted sources, the same file name should not have a different hash</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-60.git85d7426" date="1506427200">- Resolves: #1475768
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-61.git85d7426" date="1506427201">- reverted sources, the same file name should not have a different name</changelog>
</package>
<package pkgid="310a30ed485d1b2888edeaf11221461423999b92719d5b59f3af18a0d5c20d24" name="docker-client" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="68.gitec8512b.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-59.git85d7426" date="1506081600">- reverted sources, the same file name should not have a different hash</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-60.git85d7426" date="1506427200">- Resolves: #1475768
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-61.git85d7426" date="1506427201">- reverted sources, the same file name should not have a different name</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-62.git85d7426" date="1508414400">- rhel subscription secrets info moved to skopeo-containers
- require skopeo-containers &gt;= 0.1.24-3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-63.git6f58874" date="1509624000">- built docker @projectatomic/docker-1.12.6 commit 6f58874
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-64.git61aa37c" date="1509710400">- Resolves: #1498553
- built docker @projectatomic/docker-1.12.6 commit 61aa37c
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-65.git61aa37c" date="1510056000">- adjust sources file</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-66.gitd6f7b83" date="1510228800">- built docker @projectatomic/docker-1.12.6 commit d6f7b83
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-67.gitec8512b" date="1510228801">- built docker @projectatomic/docker-1.12.6 commit ec8512b
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-68.gitec8512b" date="1510833600">- revert some docker.sysconfig deletions wrongly done in commit 3b003db</changelog>
</package>
<package pkgid="ba4ff3f1e5643d3a21b7389862bfae7ef79b7915a77ed183d0e9998cff61468d" name="docker-client" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="71.git3e8e77d.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-62.git85d7426" date="1508414400">- rhel subscription secrets info moved to skopeo-containers
- require skopeo-containers &gt;= 0.1.24-3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-63.git6f58874" date="1509624000">- built docker @projectatomic/docker-1.12.6 commit 6f58874
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-64.git61aa37c" date="1509710400">- Resolves: #1498553
- built docker @projectatomic/docker-1.12.6 commit 61aa37c
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-65.git61aa37c" date="1510056000">- adjust sources file</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-66.gitd6f7b83" date="1510228800">- built docker @projectatomic/docker-1.12.6 commit d6f7b83
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-67.gitec8512b" date="1510228801">- built docker @projectatomic/docker-1.12.6 commit ec8512b
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-68.gitec8512b" date="1510833600">- revert some docker.sysconfig deletions wrongly done in commit 3b003db</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-69.gitec8512b" date="1511352000">- use oci-register-machine &gt;= 1:0-3.14</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-70.gitec8512b" date="1513080000">- Resolves: #1524634 - start daemon after registries.service</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-71.git3e8e77d" date="1513166400">- rebased to 3e8e77dcb88db0530c839b249bea7d75f9cd01d7
- https://bugzilla.redhat.com/show_bug.cgi?id=1518519</changelog>
</package>
<package pkgid="ef3c94ea0482a0b96203007513058aa2b54624894d9c07dd88a1d5c82a8fcd9a" name="docker-client" arch="x86_64">
  <version epoch="2" ver="1.13.1" rel="53.git774336d.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-71.git3e8e77d" date="1513166400">- rebased to 3e8e77dcb88db0530c839b249bea7d75f9cd01d7
- https://bugzilla.redhat.com/show_bug.cgi?id=1518519</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-1.gitddee18e" date="1516795200">- built docker @projectatomic/docker-1.13.1-rhel commit ddee18e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 5ab4ab8</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-43.gitec9911e" date="1517313600">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-44.gitec9911e" date="1517486400">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-45.gitec9911e" date="1517486401">- c-s-s &gt;= 0.7.0-1</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-46.gitec9911e" date="1517832000">- Resolves: #1542112 - depend on oci-register-machine (disabled in config file)
- revert removal of oci-register-machine done in 2:1.13.1-1</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-47.gitec9911e" date="1517832001">- oci-register-machine &gt;= 1:0-5.13 (RE: #1542112)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-48.gitec9911e" date="1517832002">- Resolves: #1536726 - bump skopeo-containers dependency</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-52.gitce62987" date="1518436800">- Resolves: #1534827, #1543575
- built docker @projectatomic/docker-1.13.1-rhel commit ce62987
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 1ba8194</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-53.git774336d" date="1519128000">- Resolves: #1540540
- built docker @projectatomic/docker-1.13.1-rhel commit 774336d
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 5b117de
- built libnetwork commit 14db3c4</changelog>
</package>
<package pkgid="4a34a78c12eb49af28d1032564dac6e844bbf20c48f823797816d7324e8b8239" name="docker-client-latest" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="26.git1faa135.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-17.1.git19ea2d3" date="1497355200">- disable s390x due to indefinite brew wait times</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-18.1.git19ea2d3" date="1497441600">- enable all arches</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-19.1.git19ea2d3" date="1497441601">- correct typo in unitfile</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1.13.1-20.1.git19ea2d3" date="1499860800">- /etc/docker/certs.d/registry.access.redhat.com/redhat-ca.crt symlink added, #1428142</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-21.1.gitcd75c68" date="1500552000">- Resolves: #1473333
- built docker @projectatomic/docker-1.13.1-rhel commit cd75c68
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 79db05f
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 4892d4d
- built libnetwork commit f81e09a
- Requires: docker &gt;= 1.12.6-48</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-22.git28ae36d" date="1501675200">- Resolves: #1475950
- Requires: docker &gt;= 2:1.12.6-50
- built docker @projectatomic/docker-1.13.1-rhel commit 28ae36d
- built docker-runc @projectatomic/docker-1.13.1-rhel commit b59a6bb
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 4892d4d
- built libnetwork commit e85aeed</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-23.git28ae36d" date="1502193600">- built docker @projectatomic/docker-1.13.1-rhel commit 28ae36d
- built docker-runc @projectatomic/docker-1.13.1-rhel commit b59a6bb
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 4892d4d
- built libnetwork commit da27c78</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-24.git1faa135" date="1505995200">- built docker @projectatomic/docker-1.13.1-rhel commit 1faa135
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit c34e58a</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-25.git1faa135" date="1506427200">- built docker @projectatomic/docker-1.13.1-rhel commit 1faa135
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 0f08d31</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-26.git1faa135" date="1506427201">- reverted sources, the same file shouldn't have a different hash</changelog>
</package>
<package pkgid="736137f739bc2bcd15aea2e854da0ce8d8529e09c6f7c1df1c895110b372c763" name="docker-client-latest" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="36.git9a813fa.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-27.gita87d43a" date="1510056000">- built docker @projectatomic/docker-1.13.1-rhel commit a87d43a
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 6bbcd1b</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-28.gita87d43a" date="1510056001">- adjust sources</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-29.gitf4b0767" date="1510228800">- built docker @projectatomic/docker-1.13.1-rhel commit f4b0767
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-30.gitcd75a45" date="1510228801">- built docker @projectatomic/docker-1.13.1-rhel commit cd75a45
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-31.git9a813fa" date="1510833600">- Resolves: #1510170
- built docker @projectatomic/docker-1.13.1-rhel commit 9a813fa
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-32.git9a813fa" date="1510833601">- do not set DOCKER_CERT_PATH if already set
- DOCKER_CERT_PATH in /etc/sysconfig/docker-latest should be /etc/docker-latest
and not /etc/docker
- document in docker-latest.sysconfig where some options have moved</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-33.git9a813fa" date="1511352000">- use docker-common &gt;= 2:1.12.6-69</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-34.git9a813fa" date="1511352001">- correct previous bogus date</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-35.git9a813fa" date="1511784000">- Resolves: #1517985 - use registries.conf from atomic-registries
- use docker-common &gt;= 2:1.12.6-68</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-36.git9a813fa" date="1511784001">- fix unitfile RE: #1517985</changelog>
</package>
<package pkgid="5e9728859af7a93a82fed005efbd5c387f54241b1a8d05c14fea41e1ad7065ee" name="docker-client-latest" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="37.git9a813fa.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-28.gita87d43a" date="1510056000">- adjust sources</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-29.gitf4b0767" date="1510228800">- built docker @projectatomic/docker-1.13.1-rhel commit f4b0767
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-30.gitcd75a45" date="1510228801">- built docker @projectatomic/docker-1.13.1-rhel commit cd75a45
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-31.git9a813fa" date="1510833600">- Resolves: #1510170
- built docker @projectatomic/docker-1.13.1-rhel commit 9a813fa
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-32.git9a813fa" date="1510833601">- do not set DOCKER_CERT_PATH if already set
- DOCKER_CERT_PATH in /etc/sysconfig/docker-latest should be /etc/docker-latest
and not /etc/docker
- document in docker-latest.sysconfig where some options have moved</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-33.git9a813fa" date="1511352000">- use docker-common &gt;= 2:1.12.6-69</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-34.git9a813fa" date="1511352001">- correct previous bogus date</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-35.git9a813fa" date="1511784000">- Resolves: #1517985 - use registries.conf from atomic-registries
- use docker-common &gt;= 2:1.12.6-68</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-36.git9a813fa" date="1511784001">- fix unitfile RE: #1517985</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-37.git9a813fa" date="1513080000">- Resolves: #1524633 - start daemon after registries.service</changelog>
</package>
<package pkgid="981617911f699c8a3173858842f2d8e17d9f1a947cf2e8dca4f55b55a4bed79d" name="docker-client-latest" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="53.git774336d.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-36.git9a813fa" date="1511784000">- fix unitfile RE: #1517985</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-37.git9a813fa" date="1513080000">- Resolves: #1524633 - start daemon after registries.service</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-43.gitec9911e" date="1517313600">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-44.gitec9911e" date="1517486400">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-45.gitec9911e" date="1517486401">- sync release tag with docker</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-46.gitec9911e" date="1517832000">- Require docker-common &gt;= 2:1.13.1-46 RE: #1542112</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-47.gitec9911e" date="1517832001">- Require docker-common &gt;= 2:1.13.1-47 RE: #1542112</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-48.gitec9911e" date="1517832002">- keep in sync with docker</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-52.gitce62987" date="1518436800">- built docker @projectatomic/docker-1.13.1-rhel commit ce62987
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 1ba8194</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-53.git774336d" date="1519128000">- built docker @projectatomic/docker-1.13.1-rhel commit 774336d
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 5b117de
- built libnetwork commit 14db3c4</changelog>
</package>
<package pkgid="4f33f6436385ba9c41c7b7f662fd245edb8dc2ea5b7a0503cc160289c7a60bb0" name="docker-common" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="55.gitc4618fb.el7"/>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 2:1.12.6-46.git1680dd8" date="1500465600">- rebased runc to 79c3939053c870fbb4de5484d98640d5ba028ef4, #1471803</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-47.git0fdc778" date="1500465601">- Resolves: #1471218
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 4f960ae</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-48.git0fdc778" date="1500552000">- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-49.git0fdc778" date="1500984000">- changed permissions of /var/lib/docker and /etc/sysconfig/docker-storage, #1473785</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-50.git0fdc778" date="1501675200">- Resolves: #1428142, #1454371, #1454420, #1456184, #1470261, #1430905
- Resolves: #1446526, #1450221, #1451474, #1459268, #1461024, #1461071
- Resolves: #1464188, #1466242, #1464933, #1470640
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-51.gitc4618fb" date="1502193600">- Resolves: #1472974
- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-52.gitc4618fb" date="1502798400">- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 299e781</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-53.gitc4618fb" date="1503403200">- Resolves: #1484146
- need container-selinux &gt;= 2:2.21-2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-54.gitc4618fb" date="1503403201">- built oci-umount commit 8377044
- ensure diff between 1.12.6-51 and latest is only container-selinux NVR</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-55.gitc4618fb" date="1503576000">- Resolves: #1477787
- built oci-umount commit 6f0317a</changelog>
</package>
<package pkgid="8c6c2d9864fa95b4759dc1418aeff33a54194bf30c64281a617368e8297fa1c6" name="docker-common" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="61.git85d7426.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-52.gitc4618fb" date="1502798400">- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 299e781</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-53.gitc4618fb" date="1503403200">- Resolves: #1484146
- need container-selinux &gt;= 2:2.21-2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-54.gitc4618fb" date="1503403201">- built oci-umount commit 8377044
- ensure diff between 1.12.6-51 and latest is only container-selinux NVR</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-55.gitc4618fb" date="1503576000">- Resolves: #1477787
- built oci-umount commit 6f0317a</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-56.git638a809" date="1505736000">- built docker @projectatomic/docker-1.12.6 commit 638a809
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 21c84aa</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-57.git85d7426" date="1505908800">- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-58.git85d7426" date="1505995200">- Resolves: #1455071
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-59.git85d7426" date="1506081600">- reverted sources, the same file name should not have a different hash</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-60.git85d7426" date="1506427200">- Resolves: #1475768
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-61.git85d7426" date="1506427201">- reverted sources, the same file name should not have a different name</changelog>
</package>
<package pkgid="1f5eb33c93887d9a50f3b61bd5ffa0d0c5f8d87db93688793547dc22556de2fc" name="docker-common" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="68.gitec8512b.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-59.git85d7426" date="1506081600">- reverted sources, the same file name should not have a different hash</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-60.git85d7426" date="1506427200">- Resolves: #1475768
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-61.git85d7426" date="1506427201">- reverted sources, the same file name should not have a different name</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-62.git85d7426" date="1508414400">- rhel subscription secrets info moved to skopeo-containers
- require skopeo-containers &gt;= 0.1.24-3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-63.git6f58874" date="1509624000">- built docker @projectatomic/docker-1.12.6 commit 6f58874
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-64.git61aa37c" date="1509710400">- Resolves: #1498553
- built docker @projectatomic/docker-1.12.6 commit 61aa37c
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-65.git61aa37c" date="1510056000">- adjust sources file</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-66.gitd6f7b83" date="1510228800">- built docker @projectatomic/docker-1.12.6 commit d6f7b83
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-67.gitec8512b" date="1510228801">- built docker @projectatomic/docker-1.12.6 commit ec8512b
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-68.gitec8512b" date="1510833600">- revert some docker.sysconfig deletions wrongly done in commit 3b003db</changelog>
</package>
<package pkgid="0379d0ee92393b705346417d251af9608cca8c9a2ca3e11df14ca0df607dfc26" name="docker-common" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="71.git3e8e77d.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-62.git85d7426" date="1508414400">- rhel subscription secrets info moved to skopeo-containers
- require skopeo-containers &gt;= 0.1.24-3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-63.git6f58874" date="1509624000">- built docker @projectatomic/docker-1.12.6 commit 6f58874
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-64.git61aa37c" date="1509710400">- Resolves: #1498553
- built docker @projectatomic/docker-1.12.6 commit 61aa37c
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-65.git61aa37c" date="1510056000">- adjust sources file</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-66.gitd6f7b83" date="1510228800">- built docker @projectatomic/docker-1.12.6 commit d6f7b83
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-67.gitec8512b" date="1510228801">- built docker @projectatomic/docker-1.12.6 commit ec8512b
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-68.gitec8512b" date="1510833600">- revert some docker.sysconfig deletions wrongly done in commit 3b003db</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-69.gitec8512b" date="1511352000">- use oci-register-machine &gt;= 1:0-3.14</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-70.gitec8512b" date="1513080000">- Resolves: #1524634 - start daemon after registries.service</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-71.git3e8e77d" date="1513166400">- rebased to 3e8e77dcb88db0530c839b249bea7d75f9cd01d7
- https://bugzilla.redhat.com/show_bug.cgi?id=1518519</changelog>
</package>
<package pkgid="a837acb53725b2a40547e9b943e72ba42f6b74c0c00fb13dcbc76b3246f74c58" name="docker-common" arch="x86_64">
  <version epoch="2" ver="1.13.1" rel="53.git774336d.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-71.git3e8e77d" date="1513166400">- rebased to 3e8e77dcb88db0530c839b249bea7d75f9cd01d7
- https://bugzilla.redhat.com/show_bug.cgi?id=1518519</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-1.gitddee18e" date="1516795200">- built docker @projectatomic/docker-1.13.1-rhel commit ddee18e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 5ab4ab8</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-43.gitec9911e" date="1517313600">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-44.gitec9911e" date="1517486400">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-45.gitec9911e" date="1517486401">- c-s-s &gt;= 0.7.0-1</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-46.gitec9911e" date="1517832000">- Resolves: #1542112 - depend on oci-register-machine (disabled in config file)
- revert removal of oci-register-machine done in 2:1.13.1-1</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-47.gitec9911e" date="1517832001">- oci-register-machine &gt;= 1:0-5.13 (RE: #1542112)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-48.gitec9911e" date="1517832002">- Resolves: #1536726 - bump skopeo-containers dependency</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-52.gitce62987" date="1518436800">- Resolves: #1534827, #1543575
- built docker @projectatomic/docker-1.13.1-rhel commit ce62987
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 1ba8194</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-53.git774336d" date="1519128000">- Resolves: #1540540
- built docker @projectatomic/docker-1.13.1-rhel commit 774336d
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 5b117de
- built libnetwork commit 14db3c4</changelog>
</package>
<package pkgid="7d809151cb31adc5f92b901f11fea648e8b8a9f90a59ecb4bf7b108e89e8a9f8" name="docker-distribution" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="1.git48294d9.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2.4.0-2" date="1461844800">- Resolves: #1330393 - update unitfile ExecStart
- From: Luwen Su &lt;lsu@redhat.com&gt;</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2.4.1-1" date="1461844801">- Resolves: #1338871 - rebase to v2.4.1
- Resolves: #1338824 - s3 driver: Sorting completed parts by part number for
a better accordance with S3 spec (upstream PR# 1670)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2.4.1-2" date="1466856000">- built with golang &gt;= 1.6.2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2.5.0-1" date="1473249600">- Resolves: #1367157 - rebase to v2.5.0
- golang 1.6.2 doesn't support elliptic.P224()</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2.5.1-1" date="1477310400">- rebase to v2.5.1</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2.5.1-2" date="1483963200">- fix wrong obsoleting of docker-registry</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2.6.0-1" date="1485172800">- rebase to v2.6.0</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2.6.0-1.1" date="1490961600">- rebuild for all available arches on 7.4</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2.6.1-1.1.gita25b9ef" date="1493985600">- rebase to v2.6.1</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2.6.2-1.git48294d9" date="1502193600">- Resolves: #1474893 CVE-2017-11468, #1478282
- rebase to v2.6.2</changelog>
</package>
<package pkgid="79af6b790f8c32df0dc65f7d8fcd5f10a8546aaa4513967d6bc81a77e1cf1502" name="docker-latest" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="26.git1faa135.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-17.1.git19ea2d3" date="1497355200">- disable s390x due to indefinite brew wait times</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-18.1.git19ea2d3" date="1497441600">- enable all arches</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-19.1.git19ea2d3" date="1497441601">- correct typo in unitfile</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1.13.1-20.1.git19ea2d3" date="1499860800">- /etc/docker/certs.d/registry.access.redhat.com/redhat-ca.crt symlink added, #1428142</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-21.1.gitcd75c68" date="1500552000">- Resolves: #1473333
- built docker @projectatomic/docker-1.13.1-rhel commit cd75c68
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 79db05f
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 4892d4d
- built libnetwork commit f81e09a
- Requires: docker &gt;= 1.12.6-48</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-22.git28ae36d" date="1501675200">- Resolves: #1475950
- Requires: docker &gt;= 2:1.12.6-50
- built docker @projectatomic/docker-1.13.1-rhel commit 28ae36d
- built docker-runc @projectatomic/docker-1.13.1-rhel commit b59a6bb
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 4892d4d
- built libnetwork commit e85aeed</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-23.git28ae36d" date="1502193600">- built docker @projectatomic/docker-1.13.1-rhel commit 28ae36d
- built docker-runc @projectatomic/docker-1.13.1-rhel commit b59a6bb
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 4892d4d
- built libnetwork commit da27c78</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-24.git1faa135" date="1505995200">- built docker @projectatomic/docker-1.13.1-rhel commit 1faa135
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit c34e58a</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-25.git1faa135" date="1506427200">- built docker @projectatomic/docker-1.13.1-rhel commit 1faa135
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 0f08d31</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-26.git1faa135" date="1506427201">- reverted sources, the same file shouldn't have a different hash</changelog>
</package>
<package pkgid="47aac15cfbc8b4ad042dd541e67cb63518279aac6e05c84333edd1a1f0bf864a" name="docker-latest" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="36.git9a813fa.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-27.gita87d43a" date="1510056000">- built docker @projectatomic/docker-1.13.1-rhel commit a87d43a
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 6bbcd1b</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-28.gita87d43a" date="1510056001">- adjust sources</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-29.gitf4b0767" date="1510228800">- built docker @projectatomic/docker-1.13.1-rhel commit f4b0767
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-30.gitcd75a45" date="1510228801">- built docker @projectatomic/docker-1.13.1-rhel commit cd75a45
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-31.git9a813fa" date="1510833600">- Resolves: #1510170
- built docker @projectatomic/docker-1.13.1-rhel commit 9a813fa
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-32.git9a813fa" date="1510833601">- do not set DOCKER_CERT_PATH if already set
- DOCKER_CERT_PATH in /etc/sysconfig/docker-latest should be /etc/docker-latest
and not /etc/docker
- document in docker-latest.sysconfig where some options have moved</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-33.git9a813fa" date="1511352000">- use docker-common &gt;= 2:1.12.6-69</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-34.git9a813fa" date="1511352001">- correct previous bogus date</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-35.git9a813fa" date="1511784000">- Resolves: #1517985 - use registries.conf from atomic-registries
- use docker-common &gt;= 2:1.12.6-68</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-36.git9a813fa" date="1511784001">- fix unitfile RE: #1517985</changelog>
</package>
<package pkgid="30c6e8bf28d1c941d745b94191c9fafc558bda6bb74831c0c9cdacced7f64429" name="docker-latest" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="37.git9a813fa.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-28.gita87d43a" date="1510056000">- adjust sources</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-29.gitf4b0767" date="1510228800">- built docker @projectatomic/docker-1.13.1-rhel commit f4b0767
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-30.gitcd75a45" date="1510228801">- built docker @projectatomic/docker-1.13.1-rhel commit cd75a45
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-31.git9a813fa" date="1510833600">- Resolves: #1510170
- built docker @projectatomic/docker-1.13.1-rhel commit 9a813fa
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-32.git9a813fa" date="1510833601">- do not set DOCKER_CERT_PATH if already set
- DOCKER_CERT_PATH in /etc/sysconfig/docker-latest should be /etc/docker-latest
and not /etc/docker
- document in docker-latest.sysconfig where some options have moved</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-33.git9a813fa" date="1511352000">- use docker-common &gt;= 2:1.12.6-69</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-34.git9a813fa" date="1511352001">- correct previous bogus date</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-35.git9a813fa" date="1511784000">- Resolves: #1517985 - use registries.conf from atomic-registries
- use docker-common &gt;= 2:1.12.6-68</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-36.git9a813fa" date="1511784001">- fix unitfile RE: #1517985</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-37.git9a813fa" date="1513080000">- Resolves: #1524633 - start daemon after registries.service</changelog>
</package>
<package pkgid="6af562347c198e0933b22e2bb4e70f4072866ed744cc2e237b3675fb8035b1bf" name="docker-latest" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="53.git774336d.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-36.git9a813fa" date="1511784000">- fix unitfile RE: #1517985</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-37.git9a813fa" date="1513080000">- Resolves: #1524633 - start daemon after registries.service</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-43.gitec9911e" date="1517313600">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-44.gitec9911e" date="1517486400">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-45.gitec9911e" date="1517486401">- sync release tag with docker</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-46.gitec9911e" date="1517832000">- Require docker-common &gt;= 2:1.13.1-46 RE: #1542112</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-47.gitec9911e" date="1517832001">- Require docker-common &gt;= 2:1.13.1-47 RE: #1542112</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-48.gitec9911e" date="1517832002">- keep in sync with docker</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-52.gitce62987" date="1518436800">- built docker @projectatomic/docker-1.13.1-rhel commit ce62987
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 1ba8194</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-53.git774336d" date="1519128000">- built docker @projectatomic/docker-1.13.1-rhel commit 774336d
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 5b117de
- built libnetwork commit 14db3c4</changelog>
</package>
<package pkgid="24cd16e89dd2c7e426fa1de25da27d8d0066ff6748257867c4d70b693febb63d" name="docker-latest-logrotate" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="26.git1faa135.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-17.1.git19ea2d3" date="1497355200">- disable s390x due to indefinite brew wait times</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-18.1.git19ea2d3" date="1497441600">- enable all arches</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-19.1.git19ea2d3" date="1497441601">- correct typo in unitfile</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1.13.1-20.1.git19ea2d3" date="1499860800">- /etc/docker/certs.d/registry.access.redhat.com/redhat-ca.crt symlink added, #1428142</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-21.1.gitcd75c68" date="1500552000">- Resolves: #1473333
- built docker @projectatomic/docker-1.13.1-rhel commit cd75c68
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 79db05f
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 4892d4d
- built libnetwork commit f81e09a
- Requires: docker &gt;= 1.12.6-48</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-22.git28ae36d" date="1501675200">- Resolves: #1475950
- Requires: docker &gt;= 2:1.12.6-50
- built docker @projectatomic/docker-1.13.1-rhel commit 28ae36d
- built docker-runc @projectatomic/docker-1.13.1-rhel commit b59a6bb
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 4892d4d
- built libnetwork commit e85aeed</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-23.git28ae36d" date="1502193600">- built docker @projectatomic/docker-1.13.1-rhel commit 28ae36d
- built docker-runc @projectatomic/docker-1.13.1-rhel commit b59a6bb
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 4892d4d
- built libnetwork commit da27c78</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-24.git1faa135" date="1505995200">- built docker @projectatomic/docker-1.13.1-rhel commit 1faa135
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit c34e58a</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-25.git1faa135" date="1506427200">- built docker @projectatomic/docker-1.13.1-rhel commit 1faa135
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 0f08d31</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-26.git1faa135" date="1506427201">- reverted sources, the same file shouldn't have a different hash</changelog>
</package>
<package pkgid="c30330c45ba1124f2061027a339ae5cac5856f16cae89cb66c306b1ab7148032" name="docker-latest-logrotate" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="36.git9a813fa.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-27.gita87d43a" date="1510056000">- built docker @projectatomic/docker-1.13.1-rhel commit a87d43a
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 6bbcd1b</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-28.gita87d43a" date="1510056001">- adjust sources</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-29.gitf4b0767" date="1510228800">- built docker @projectatomic/docker-1.13.1-rhel commit f4b0767
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-30.gitcd75a45" date="1510228801">- built docker @projectatomic/docker-1.13.1-rhel commit cd75a45
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-31.git9a813fa" date="1510833600">- Resolves: #1510170
- built docker @projectatomic/docker-1.13.1-rhel commit 9a813fa
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-32.git9a813fa" date="1510833601">- do not set DOCKER_CERT_PATH if already set
- DOCKER_CERT_PATH in /etc/sysconfig/docker-latest should be /etc/docker-latest
and not /etc/docker
- document in docker-latest.sysconfig where some options have moved</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-33.git9a813fa" date="1511352000">- use docker-common &gt;= 2:1.12.6-69</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-34.git9a813fa" date="1511352001">- correct previous bogus date</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-35.git9a813fa" date="1511784000">- Resolves: #1517985 - use registries.conf from atomic-registries
- use docker-common &gt;= 2:1.12.6-68</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-36.git9a813fa" date="1511784001">- fix unitfile RE: #1517985</changelog>
</package>
<package pkgid="8cd7002c91718f330102bce545d20fead0a1f285b9a627abeb986ec26be46259" name="docker-latest-logrotate" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="37.git9a813fa.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-28.gita87d43a" date="1510056000">- adjust sources</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-29.gitf4b0767" date="1510228800">- built docker @projectatomic/docker-1.13.1-rhel commit f4b0767
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-30.gitcd75a45" date="1510228801">- built docker @projectatomic/docker-1.13.1-rhel commit cd75a45
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-31.git9a813fa" date="1510833600">- Resolves: #1510170
- built docker @projectatomic/docker-1.13.1-rhel commit 9a813fa
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-32.git9a813fa" date="1510833601">- do not set DOCKER_CERT_PATH if already set
- DOCKER_CERT_PATH in /etc/sysconfig/docker-latest should be /etc/docker-latest
and not /etc/docker
- document in docker-latest.sysconfig where some options have moved</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-33.git9a813fa" date="1511352000">- use docker-common &gt;= 2:1.12.6-69</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-34.git9a813fa" date="1511352001">- correct previous bogus date</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-35.git9a813fa" date="1511784000">- Resolves: #1517985 - use registries.conf from atomic-registries
- use docker-common &gt;= 2:1.12.6-68</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-36.git9a813fa" date="1511784001">- fix unitfile RE: #1517985</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-37.git9a813fa" date="1513080000">- Resolves: #1524633 - start daemon after registries.service</changelog>
</package>
<package pkgid="8ee8015f802c1946d6d9fa21e44836d9bf3ec89cfc0ab6b8318b4a40983de846" name="docker-latest-logrotate" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="53.git774336d.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-36.git9a813fa" date="1511784000">- fix unitfile RE: #1517985</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-37.git9a813fa" date="1513080000">- Resolves: #1524633 - start daemon after registries.service</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-43.gitec9911e" date="1517313600">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-44.gitec9911e" date="1517486400">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-45.gitec9911e" date="1517486401">- sync release tag with docker</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-46.gitec9911e" date="1517832000">- Require docker-common &gt;= 2:1.13.1-46 RE: #1542112</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-47.gitec9911e" date="1517832001">- Require docker-common &gt;= 2:1.13.1-47 RE: #1542112</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-48.gitec9911e" date="1517832002">- keep in sync with docker</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-52.gitce62987" date="1518436800">- built docker @projectatomic/docker-1.13.1-rhel commit ce62987
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 1ba8194</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-53.git774336d" date="1519128000">- built docker @projectatomic/docker-1.13.1-rhel commit 774336d
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 5b117de
- built libnetwork commit 14db3c4</changelog>
</package>
<package pkgid="03399b8884beaa6e8887e77ba0425aeb810773edfb5d95de24f39c7cfcfc7d02" name="docker-latest-v1.10-migrator" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="26.git1faa135.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-17.1.git19ea2d3" date="1497355200">- disable s390x due to indefinite brew wait times</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-18.1.git19ea2d3" date="1497441600">- enable all arches</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-19.1.git19ea2d3" date="1497441601">- correct typo in unitfile</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1.13.1-20.1.git19ea2d3" date="1499860800">- /etc/docker/certs.d/registry.access.redhat.com/redhat-ca.crt symlink added, #1428142</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-21.1.gitcd75c68" date="1500552000">- Resolves: #1473333
- built docker @projectatomic/docker-1.13.1-rhel commit cd75c68
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 79db05f
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 4892d4d
- built libnetwork commit f81e09a
- Requires: docker &gt;= 1.12.6-48</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-22.git28ae36d" date="1501675200">- Resolves: #1475950
- Requires: docker &gt;= 2:1.12.6-50
- built docker @projectatomic/docker-1.13.1-rhel commit 28ae36d
- built docker-runc @projectatomic/docker-1.13.1-rhel commit b59a6bb
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 4892d4d
- built libnetwork commit e85aeed</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-23.git28ae36d" date="1502193600">- built docker @projectatomic/docker-1.13.1-rhel commit 28ae36d
- built docker-runc @projectatomic/docker-1.13.1-rhel commit b59a6bb
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 4892d4d
- built libnetwork commit da27c78</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-24.git1faa135" date="1505995200">- built docker @projectatomic/docker-1.13.1-rhel commit 1faa135
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit c34e58a</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-25.git1faa135" date="1506427200">- built docker @projectatomic/docker-1.13.1-rhel commit 1faa135
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 0f08d31</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-26.git1faa135" date="1506427201">- reverted sources, the same file shouldn't have a different hash</changelog>
</package>
<package pkgid="a5b82783ada9ce4fca2516f2ac40f604bca6adf4833059f1eb5bdd7dd4fe57c1" name="docker-latest-v1.10-migrator" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="36.git9a813fa.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-27.gita87d43a" date="1510056000">- built docker @projectatomic/docker-1.13.1-rhel commit a87d43a
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 6bbcd1b</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-28.gita87d43a" date="1510056001">- adjust sources</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-29.gitf4b0767" date="1510228800">- built docker @projectatomic/docker-1.13.1-rhel commit f4b0767
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-30.gitcd75a45" date="1510228801">- built docker @projectatomic/docker-1.13.1-rhel commit cd75a45
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-31.git9a813fa" date="1510833600">- Resolves: #1510170
- built docker @projectatomic/docker-1.13.1-rhel commit 9a813fa
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-32.git9a813fa" date="1510833601">- do not set DOCKER_CERT_PATH if already set
- DOCKER_CERT_PATH in /etc/sysconfig/docker-latest should be /etc/docker-latest
and not /etc/docker
- document in docker-latest.sysconfig where some options have moved</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-33.git9a813fa" date="1511352000">- use docker-common &gt;= 2:1.12.6-69</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-34.git9a813fa" date="1511352001">- correct previous bogus date</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-35.git9a813fa" date="1511784000">- Resolves: #1517985 - use registries.conf from atomic-registries
- use docker-common &gt;= 2:1.12.6-68</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-36.git9a813fa" date="1511784001">- fix unitfile RE: #1517985</changelog>
</package>
<package pkgid="a4f63e569b9ec6aea2e9cbeffc68551e77e1efe6b3650d30d66a82be0fbea611" name="docker-latest-v1.10-migrator" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="37.git9a813fa.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-28.gita87d43a" date="1510056000">- adjust sources</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-29.gitf4b0767" date="1510228800">- built docker @projectatomic/docker-1.13.1-rhel commit f4b0767
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-30.gitcd75a45" date="1510228801">- built docker @projectatomic/docker-1.13.1-rhel commit cd75a45
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-31.git9a813fa" date="1510833600">- Resolves: #1510170
- built docker @projectatomic/docker-1.13.1-rhel commit 9a813fa
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-32.git9a813fa" date="1510833601">- do not set DOCKER_CERT_PATH if already set
- DOCKER_CERT_PATH in /etc/sysconfig/docker-latest should be /etc/docker-latest
and not /etc/docker
- document in docker-latest.sysconfig where some options have moved</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-33.git9a813fa" date="1511352000">- use docker-common &gt;= 2:1.12.6-69</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-34.git9a813fa" date="1511352001">- correct previous bogus date</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-35.git9a813fa" date="1511784000">- Resolves: #1517985 - use registries.conf from atomic-registries
- use docker-common &gt;= 2:1.12.6-68</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-36.git9a813fa" date="1511784001">- fix unitfile RE: #1517985</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-37.git9a813fa" date="1513080000">- Resolves: #1524633 - start daemon after registries.service</changelog>
</package>
<package pkgid="bd789cde686fd8eedaff3531499707a6150ba8a8f3563bac1c2d9773d26d921b" name="docker-latest-v1.10-migrator" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="53.git774336d.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-36.git9a813fa" date="1511784000">- fix unitfile RE: #1517985</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-37.git9a813fa" date="1513080000">- Resolves: #1524633 - start daemon after registries.service</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-43.gitec9911e" date="1517313600">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-44.gitec9911e" date="1517486400">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-45.gitec9911e" date="1517486401">- sync release tag with docker</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-46.gitec9911e" date="1517832000">- Require docker-common &gt;= 2:1.13.1-46 RE: #1542112</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-47.gitec9911e" date="1517832001">- Require docker-common &gt;= 2:1.13.1-47 RE: #1542112</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-48.gitec9911e" date="1517832002">- keep in sync with docker</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-52.gitce62987" date="1518436800">- built docker @projectatomic/docker-1.13.1-rhel commit ce62987
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 1ba8194</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-53.git774336d" date="1519128000">- built docker @projectatomic/docker-1.13.1-rhel commit 774336d
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 5b117de
- built libnetwork commit 14db3c4</changelog>
</package>
<package pkgid="34103261c319b535e46b1ca38f3b1de8bd9add07aafda1e75533bab6045e3588" name="docker-logrotate" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="55.gitc4618fb.el7"/>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 2:1.12.6-46.git1680dd8" date="1500465600">- rebased runc to 79c3939053c870fbb4de5484d98640d5ba028ef4, #1471803</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-47.git0fdc778" date="1500465601">- Resolves: #1471218
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 4f960ae</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-48.git0fdc778" date="1500552000">- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-49.git0fdc778" date="1500984000">- changed permissions of /var/lib/docker and /etc/sysconfig/docker-storage, #1473785</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-50.git0fdc778" date="1501675200">- Resolves: #1428142, #1454371, #1454420, #1456184, #1470261, #1430905
- Resolves: #1446526, #1450221, #1451474, #1459268, #1461024, #1461071
- Resolves: #1464188, #1466242, #1464933, #1470640
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-51.gitc4618fb" date="1502193600">- Resolves: #1472974
- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-52.gitc4618fb" date="1502798400">- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 299e781</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-53.gitc4618fb" date="1503403200">- Resolves: #1484146
- need container-selinux &gt;= 2:2.21-2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-54.gitc4618fb" date="1503403201">- built oci-umount commit 8377044
- ensure diff between 1.12.6-51 and latest is only container-selinux NVR</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-55.gitc4618fb" date="1503576000">- Resolves: #1477787
- built oci-umount commit 6f0317a</changelog>
</package>
<package pkgid="12533906b4c17cf675024a3164cdc81c9b64f955665ab5a749f66e43a0d9e74a" name="docker-logrotate" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="61.git85d7426.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-52.gitc4618fb" date="1502798400">- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 299e781</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-53.gitc4618fb" date="1503403200">- Resolves: #1484146
- need container-selinux &gt;= 2:2.21-2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-54.gitc4618fb" date="1503403201">- built oci-umount commit 8377044
- ensure diff between 1.12.6-51 and latest is only container-selinux NVR</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-55.gitc4618fb" date="1503576000">- Resolves: #1477787
- built oci-umount commit 6f0317a</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-56.git638a809" date="1505736000">- built docker @projectatomic/docker-1.12.6 commit 638a809
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 21c84aa</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-57.git85d7426" date="1505908800">- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-58.git85d7426" date="1505995200">- Resolves: #1455071
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-59.git85d7426" date="1506081600">- reverted sources, the same file name should not have a different hash</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-60.git85d7426" date="1506427200">- Resolves: #1475768
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-61.git85d7426" date="1506427201">- reverted sources, the same file name should not have a different name</changelog>
</package>
<package pkgid="0cf2b5711f57fd7da3c06ad011d45aaf185120b9ee04e44e834b618dd4e1ccd6" name="docker-logrotate" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="68.gitec8512b.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-59.git85d7426" date="1506081600">- reverted sources, the same file name should not have a different hash</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-60.git85d7426" date="1506427200">- Resolves: #1475768
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-61.git85d7426" date="1506427201">- reverted sources, the same file name should not have a different name</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-62.git85d7426" date="1508414400">- rhel subscription secrets info moved to skopeo-containers
- require skopeo-containers &gt;= 0.1.24-3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-63.git6f58874" date="1509624000">- built docker @projectatomic/docker-1.12.6 commit 6f58874
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-64.git61aa37c" date="1509710400">- Resolves: #1498553
- built docker @projectatomic/docker-1.12.6 commit 61aa37c
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-65.git61aa37c" date="1510056000">- adjust sources file</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-66.gitd6f7b83" date="1510228800">- built docker @projectatomic/docker-1.12.6 commit d6f7b83
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-67.gitec8512b" date="1510228801">- built docker @projectatomic/docker-1.12.6 commit ec8512b
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-68.gitec8512b" date="1510833600">- revert some docker.sysconfig deletions wrongly done in commit 3b003db</changelog>
</package>
<package pkgid="7bbc7a8c11a761acd320ca5a56567b326f833ca7dfd1bcd25bdb6c7cb44cf4b5" name="docker-logrotate" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="71.git3e8e77d.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-62.git85d7426" date="1508414400">- rhel subscription secrets info moved to skopeo-containers
- require skopeo-containers &gt;= 0.1.24-3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-63.git6f58874" date="1509624000">- built docker @projectatomic/docker-1.12.6 commit 6f58874
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-64.git61aa37c" date="1509710400">- Resolves: #1498553
- built docker @projectatomic/docker-1.12.6 commit 61aa37c
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-65.git61aa37c" date="1510056000">- adjust sources file</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-66.gitd6f7b83" date="1510228800">- built docker @projectatomic/docker-1.12.6 commit d6f7b83
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-67.gitec8512b" date="1510228801">- built docker @projectatomic/docker-1.12.6 commit ec8512b
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-68.gitec8512b" date="1510833600">- revert some docker.sysconfig deletions wrongly done in commit 3b003db</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-69.gitec8512b" date="1511352000">- use oci-register-machine &gt;= 1:0-3.14</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-70.gitec8512b" date="1513080000">- Resolves: #1524634 - start daemon after registries.service</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-71.git3e8e77d" date="1513166400">- rebased to 3e8e77dcb88db0530c839b249bea7d75f9cd01d7
- https://bugzilla.redhat.com/show_bug.cgi?id=1518519</changelog>
</package>
<package pkgid="f2641b78f3bfb6089ab705d75acc69119597a6ec2e0e94c71e7588dd7b24d4c0" name="docker-logrotate" arch="x86_64">
  <version epoch="2" ver="1.13.1" rel="53.git774336d.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-71.git3e8e77d" date="1513166400">- rebased to 3e8e77dcb88db0530c839b249bea7d75f9cd01d7
- https://bugzilla.redhat.com/show_bug.cgi?id=1518519</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-1.gitddee18e" date="1516795200">- built docker @projectatomic/docker-1.13.1-rhel commit ddee18e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 5ab4ab8</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-43.gitec9911e" date="1517313600">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-44.gitec9911e" date="1517486400">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-45.gitec9911e" date="1517486401">- c-s-s &gt;= 0.7.0-1</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-46.gitec9911e" date="1517832000">- Resolves: #1542112 - depend on oci-register-machine (disabled in config file)
- revert removal of oci-register-machine done in 2:1.13.1-1</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-47.gitec9911e" date="1517832001">- oci-register-machine &gt;= 1:0-5.13 (RE: #1542112)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-48.gitec9911e" date="1517832002">- Resolves: #1536726 - bump skopeo-containers dependency</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-52.gitce62987" date="1518436800">- Resolves: #1534827, #1543575
- built docker @projectatomic/docker-1.13.1-rhel commit ce62987
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 1ba8194</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-53.git774336d" date="1519128000">- Resolves: #1540540
- built docker @projectatomic/docker-1.13.1-rhel commit 774336d
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 5b117de
- built libnetwork commit 14db3c4</changelog>
</package>
<package pkgid="d464cac603897b91ea46eea0b9d796a6d9bf8c3596e1fd0571ed9ed5b19b6e59" name="docker-lvm-plugin" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="55.gitc4618fb.el7"/>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 2:1.12.6-46.git1680dd8" date="1500465600">- rebased runc to 79c3939053c870fbb4de5484d98640d5ba028ef4, #1471803</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-47.git0fdc778" date="1500465601">- Resolves: #1471218
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 4f960ae</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-48.git0fdc778" date="1500552000">- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-49.git0fdc778" date="1500984000">- changed permissions of /var/lib/docker and /etc/sysconfig/docker-storage, #1473785</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-50.git0fdc778" date="1501675200">- Resolves: #1428142, #1454371, #1454420, #1456184, #1470261, #1430905
- Resolves: #1446526, #1450221, #1451474, #1459268, #1461024, #1461071
- Resolves: #1464188, #1466242, #1464933, #1470640
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-51.gitc4618fb" date="1502193600">- Resolves: #1472974
- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-52.gitc4618fb" date="1502798400">- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 299e781</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-53.gitc4618fb" date="1503403200">- Resolves: #1484146
- need container-selinux &gt;= 2:2.21-2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-54.gitc4618fb" date="1503403201">- built oci-umount commit 8377044
- ensure diff between 1.12.6-51 and latest is only container-selinux NVR</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-55.gitc4618fb" date="1503576000">- Resolves: #1477787
- built oci-umount commit 6f0317a</changelog>
</package>
<package pkgid="023dab5d324b08cb622fd474dd266ea6f8f5fcd08cd6b155ea5551e1280afa16" name="docker-lvm-plugin" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="61.git85d7426.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-52.gitc4618fb" date="1502798400">- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 299e781</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-53.gitc4618fb" date="1503403200">- Resolves: #1484146
- need container-selinux &gt;= 2:2.21-2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-54.gitc4618fb" date="1503403201">- built oci-umount commit 8377044
- ensure diff between 1.12.6-51 and latest is only container-selinux NVR</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-55.gitc4618fb" date="1503576000">- Resolves: #1477787
- built oci-umount commit 6f0317a</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-56.git638a809" date="1505736000">- built docker @projectatomic/docker-1.12.6 commit 638a809
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 21c84aa</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-57.git85d7426" date="1505908800">- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-58.git85d7426" date="1505995200">- Resolves: #1455071
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-59.git85d7426" date="1506081600">- reverted sources, the same file name should not have a different hash</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-60.git85d7426" date="1506427200">- Resolves: #1475768
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-61.git85d7426" date="1506427201">- reverted sources, the same file name should not have a different name</changelog>
</package>
<package pkgid="943c3f50358e23b54cc413bd755ffd55145a0aff6c917a46489d49e1f7621f78" name="docker-lvm-plugin" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="68.gitec8512b.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-59.git85d7426" date="1506081600">- reverted sources, the same file name should not have a different hash</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-60.git85d7426" date="1506427200">- Resolves: #1475768
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-61.git85d7426" date="1506427201">- reverted sources, the same file name should not have a different name</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-62.git85d7426" date="1508414400">- rhel subscription secrets info moved to skopeo-containers
- require skopeo-containers &gt;= 0.1.24-3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-63.git6f58874" date="1509624000">- built docker @projectatomic/docker-1.12.6 commit 6f58874
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-64.git61aa37c" date="1509710400">- Resolves: #1498553
- built docker @projectatomic/docker-1.12.6 commit 61aa37c
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-65.git61aa37c" date="1510056000">- adjust sources file</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-66.gitd6f7b83" date="1510228800">- built docker @projectatomic/docker-1.12.6 commit d6f7b83
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-67.gitec8512b" date="1510228801">- built docker @projectatomic/docker-1.12.6 commit ec8512b
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-68.gitec8512b" date="1510833600">- revert some docker.sysconfig deletions wrongly done in commit 3b003db</changelog>
</package>
<package pkgid="c461517e1bc23c3cf7439eca07a178afb6b2e642cc3b29e89f5f07b904a36725" name="docker-lvm-plugin" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="71.git3e8e77d.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-62.git85d7426" date="1508414400">- rhel subscription secrets info moved to skopeo-containers
- require skopeo-containers &gt;= 0.1.24-3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-63.git6f58874" date="1509624000">- built docker @projectatomic/docker-1.12.6 commit 6f58874
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-64.git61aa37c" date="1509710400">- Resolves: #1498553
- built docker @projectatomic/docker-1.12.6 commit 61aa37c
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-65.git61aa37c" date="1510056000">- adjust sources file</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-66.gitd6f7b83" date="1510228800">- built docker @projectatomic/docker-1.12.6 commit d6f7b83
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-67.gitec8512b" date="1510228801">- built docker @projectatomic/docker-1.12.6 commit ec8512b
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-68.gitec8512b" date="1510833600">- revert some docker.sysconfig deletions wrongly done in commit 3b003db</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-69.gitec8512b" date="1511352000">- use oci-register-machine &gt;= 1:0-3.14</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-70.gitec8512b" date="1513080000">- Resolves: #1524634 - start daemon after registries.service</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-71.git3e8e77d" date="1513166400">- rebased to 3e8e77dcb88db0530c839b249bea7d75f9cd01d7
- https://bugzilla.redhat.com/show_bug.cgi?id=1518519</changelog>
</package>
<package pkgid="5fe3d1dc046f8d360df4381e601433f06791ee1d2079863f1688e607893b049b" name="docker-lvm-plugin" arch="x86_64">
  <version epoch="2" ver="1.13.1" rel="53.git774336d.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-71.git3e8e77d" date="1513166400">- rebased to 3e8e77dcb88db0530c839b249bea7d75f9cd01d7
- https://bugzilla.redhat.com/show_bug.cgi?id=1518519</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-1.gitddee18e" date="1516795200">- built docker @projectatomic/docker-1.13.1-rhel commit ddee18e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 5ab4ab8</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-43.gitec9911e" date="1517313600">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-44.gitec9911e" date="1517486400">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-45.gitec9911e" date="1517486401">- c-s-s &gt;= 0.7.0-1</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-46.gitec9911e" date="1517832000">- Resolves: #1542112 - depend on oci-register-machine (disabled in config file)
- revert removal of oci-register-machine done in 2:1.13.1-1</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-47.gitec9911e" date="1517832001">- oci-register-machine &gt;= 1:0-5.13 (RE: #1542112)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-48.gitec9911e" date="1517832002">- Resolves: #1536726 - bump skopeo-containers dependency</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-52.gitce62987" date="1518436800">- Resolves: #1534827, #1543575
- built docker @projectatomic/docker-1.13.1-rhel commit ce62987
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 1ba8194</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-53.git774336d" date="1519128000">- Resolves: #1540540
- built docker @projectatomic/docker-1.13.1-rhel commit 774336d
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 5b117de
- built libnetwork commit 14db3c4</changelog>
</package>
<package pkgid="01f0d6a8af5697213b266408ae31d905302e24ebf9cbcb916c01277b119c3d93" name="docker-novolume-plugin" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="55.gitc4618fb.el7"/>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 2:1.12.6-46.git1680dd8" date="1500465600">- rebased runc to 79c3939053c870fbb4de5484d98640d5ba028ef4, #1471803</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-47.git0fdc778" date="1500465601">- Resolves: #1471218
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 4f960ae</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-48.git0fdc778" date="1500552000">- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-49.git0fdc778" date="1500984000">- changed permissions of /var/lib/docker and /etc/sysconfig/docker-storage, #1473785</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-50.git0fdc778" date="1501675200">- Resolves: #1428142, #1454371, #1454420, #1456184, #1470261, #1430905
- Resolves: #1446526, #1450221, #1451474, #1459268, #1461024, #1461071
- Resolves: #1464188, #1466242, #1464933, #1470640
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-51.gitc4618fb" date="1502193600">- Resolves: #1472974
- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-52.gitc4618fb" date="1502798400">- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 299e781</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-53.gitc4618fb" date="1503403200">- Resolves: #1484146
- need container-selinux &gt;= 2:2.21-2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-54.gitc4618fb" date="1503403201">- built oci-umount commit 8377044
- ensure diff between 1.12.6-51 and latest is only container-selinux NVR</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-55.gitc4618fb" date="1503576000">- Resolves: #1477787
- built oci-umount commit 6f0317a</changelog>
</package>
<package pkgid="5ceaab3d623789b63b214e76738499cdd9ed37d6331220b351945ff272be3c28" name="docker-novolume-plugin" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="61.git85d7426.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-52.gitc4618fb" date="1502798400">- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 299e781</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-53.gitc4618fb" date="1503403200">- Resolves: #1484146
- need container-selinux &gt;= 2:2.21-2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-54.gitc4618fb" date="1503403201">- built oci-umount commit 8377044
- ensure diff between 1.12.6-51 and latest is only container-selinux NVR</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-55.gitc4618fb" date="1503576000">- Resolves: #1477787
- built oci-umount commit 6f0317a</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-56.git638a809" date="1505736000">- built docker @projectatomic/docker-1.12.6 commit 638a809
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 21c84aa</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-57.git85d7426" date="1505908800">- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-58.git85d7426" date="1505995200">- Resolves: #1455071
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-59.git85d7426" date="1506081600">- reverted sources, the same file name should not have a different hash</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-60.git85d7426" date="1506427200">- Resolves: #1475768
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-61.git85d7426" date="1506427201">- reverted sources, the same file name should not have a different name</changelog>
</package>
<package pkgid="4b9eda06dfd63110c4b79d9fc79cea1722da290fc01c0cc99ee93baad3cdd2bb" name="docker-novolume-plugin" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="68.gitec8512b.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-59.git85d7426" date="1506081600">- reverted sources, the same file name should not have a different hash</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-60.git85d7426" date="1506427200">- Resolves: #1475768
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-61.git85d7426" date="1506427201">- reverted sources, the same file name should not have a different name</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-62.git85d7426" date="1508414400">- rhel subscription secrets info moved to skopeo-containers
- require skopeo-containers &gt;= 0.1.24-3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-63.git6f58874" date="1509624000">- built docker @projectatomic/docker-1.12.6 commit 6f58874
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-64.git61aa37c" date="1509710400">- Resolves: #1498553
- built docker @projectatomic/docker-1.12.6 commit 61aa37c
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-65.git61aa37c" date="1510056000">- adjust sources file</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-66.gitd6f7b83" date="1510228800">- built docker @projectatomic/docker-1.12.6 commit d6f7b83
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-67.gitec8512b" date="1510228801">- built docker @projectatomic/docker-1.12.6 commit ec8512b
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-68.gitec8512b" date="1510833600">- revert some docker.sysconfig deletions wrongly done in commit 3b003db</changelog>
</package>
<package pkgid="5509696501db0659329a65d06179c1766184e1f0067e3ce136aa97cf2976c0fa" name="docker-novolume-plugin" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="71.git3e8e77d.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-62.git85d7426" date="1508414400">- rhel subscription secrets info moved to skopeo-containers
- require skopeo-containers &gt;= 0.1.24-3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-63.git6f58874" date="1509624000">- built docker @projectatomic/docker-1.12.6 commit 6f58874
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-64.git61aa37c" date="1509710400">- Resolves: #1498553
- built docker @projectatomic/docker-1.12.6 commit 61aa37c
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-65.git61aa37c" date="1510056000">- adjust sources file</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-66.gitd6f7b83" date="1510228800">- built docker @projectatomic/docker-1.12.6 commit d6f7b83
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-67.gitec8512b" date="1510228801">- built docker @projectatomic/docker-1.12.6 commit ec8512b
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-68.gitec8512b" date="1510833600">- revert some docker.sysconfig deletions wrongly done in commit 3b003db</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-69.gitec8512b" date="1511352000">- use oci-register-machine &gt;= 1:0-3.14</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-70.gitec8512b" date="1513080000">- Resolves: #1524634 - start daemon after registries.service</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-71.git3e8e77d" date="1513166400">- rebased to 3e8e77dcb88db0530c839b249bea7d75f9cd01d7
- https://bugzilla.redhat.com/show_bug.cgi?id=1518519</changelog>
</package>
<package pkgid="1c8459025f646205ee2c42f55dd1492f315f277b3a300d04a8e1883d9ef1842f" name="docker-novolume-plugin" arch="x86_64">
  <version epoch="2" ver="1.13.1" rel="53.git774336d.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-71.git3e8e77d" date="1513166400">- rebased to 3e8e77dcb88db0530c839b249bea7d75f9cd01d7
- https://bugzilla.redhat.com/show_bug.cgi?id=1518519</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-1.gitddee18e" date="1516795200">- built docker @projectatomic/docker-1.13.1-rhel commit ddee18e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 5ab4ab8</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-43.gitec9911e" date="1517313600">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-44.gitec9911e" date="1517486400">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-45.gitec9911e" date="1517486401">- c-s-s &gt;= 0.7.0-1</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-46.gitec9911e" date="1517832000">- Resolves: #1542112 - depend on oci-register-machine (disabled in config file)
- revert removal of oci-register-machine done in 2:1.13.1-1</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-47.gitec9911e" date="1517832001">- oci-register-machine &gt;= 1:0-5.13 (RE: #1542112)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-48.gitec9911e" date="1517832002">- Resolves: #1536726 - bump skopeo-containers dependency</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-52.gitce62987" date="1518436800">- Resolves: #1534827, #1543575
- built docker @projectatomic/docker-1.13.1-rhel commit ce62987
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 1ba8194</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-53.git774336d" date="1519128000">- Resolves: #1540540
- built docker @projectatomic/docker-1.13.1-rhel commit 774336d
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 5b117de
- built libnetwork commit 14db3c4</changelog>
</package>
<package pkgid="cf26a4940344664cf47b1352f652e08b9a5697f475b37d7a9215af606bcf4f74" name="docker-registry" arch="x86_64">
  <version epoch="0" ver="0.9.1" rel="7.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.6.8-8" date="1399377600">- import lzma if no backports.lzma</changelog>
  <changelog author="Tomas Hrcka &lt;thrcka@redhat.com&gt; - 0.6.8-9" date="1414152000">- Set standalone:true in docker_registry.yml</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.6.8-10" date="1416571200">- Resolves: rhbz#1158538 - use python-backports instead of
python-backports-lzma
- remove systemd/sysvinit conditionals, only systemd used in RHEL7
- BR: pkgconfig(systemd)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.6.8-11" date="1418817600">- Resolves: rhbz#1175305 - should require python-backports-lzma &gt;= 0.0.2-8
- use systemd and not systemd-units</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.6.8-12" date="1418817601">- No longer noarch because python-backports isn't noarch anymore
- remove unused redis python binding patch</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.6.8-13" date="1422532800">- use correct min NVR of python-backports
- preserver timestamps of copied files</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.9.1-4" date="1425902400">- Resolves: rhbz#1171295 - update to 0.9.1
- Resolves: rhbz#1187101 - set storage path to /var/lib/docker-registry
to ensure the same storage path is looked up after update
- Don't install or own /var/lib/docker-registry</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.9.1-5" date="1430481600">- Resolves: rhbz#1217628
- include python-sqlalchemy as a subpackage</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.9.1-6" date="1436356800">- remove python-sqlalchemy subpackage, use it from extras repo</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.9.1-7" date="1436356801">- disable empty debuginfo package</changelog>
</package>
<package pkgid="662fec5f17e86eb0c22fe14e0e964398783dd774a45bcebf06d95a0224cbe246" name="docker-unit-test" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="55.gitc4618fb.el7"/>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 2:1.12.6-46.git1680dd8" date="1500465600">- rebased runc to 79c3939053c870fbb4de5484d98640d5ba028ef4, #1471803</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-47.git0fdc778" date="1500465601">- Resolves: #1471218
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 4f960ae</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-48.git0fdc778" date="1500552000">- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-49.git0fdc778" date="1500984000">- changed permissions of /var/lib/docker and /etc/sysconfig/docker-storage, #1473785</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-50.git0fdc778" date="1501675200">- Resolves: #1428142, #1454371, #1454420, #1456184, #1470261, #1430905
- Resolves: #1446526, #1450221, #1451474, #1459268, #1461024, #1461071
- Resolves: #1464188, #1466242, #1464933, #1470640
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-51.gitc4618fb" date="1502193600">- Resolves: #1472974
- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-52.gitc4618fb" date="1502798400">- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 299e781</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-53.gitc4618fb" date="1503403200">- Resolves: #1484146
- need container-selinux &gt;= 2:2.21-2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-54.gitc4618fb" date="1503403201">- built oci-umount commit 8377044
- ensure diff between 1.12.6-51 and latest is only container-selinux NVR</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-55.gitc4618fb" date="1503576000">- Resolves: #1477787
- built oci-umount commit 6f0317a</changelog>
</package>
<package pkgid="08cdcb4e69331070a2b9f15993881d83e1f537f9af265d6d86305dccce008532" name="docker-unit-test" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="61.git85d7426.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-52.gitc4618fb" date="1502798400">- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 299e781</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-53.gitc4618fb" date="1503403200">- Resolves: #1484146
- need container-selinux &gt;= 2:2.21-2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-54.gitc4618fb" date="1503403201">- built oci-umount commit 8377044
- ensure diff between 1.12.6-51 and latest is only container-selinux NVR</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-55.gitc4618fb" date="1503576000">- Resolves: #1477787
- built oci-umount commit 6f0317a</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-56.git638a809" date="1505736000">- built docker @projectatomic/docker-1.12.6 commit 638a809
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 21c84aa</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-57.git85d7426" date="1505908800">- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-58.git85d7426" date="1505995200">- Resolves: #1455071
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-59.git85d7426" date="1506081600">- reverted sources, the same file name should not have a different hash</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-60.git85d7426" date="1506427200">- Resolves: #1475768
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-61.git85d7426" date="1506427201">- reverted sources, the same file name should not have a different name</changelog>
</package>
<package pkgid="8532d57b5cf5863eb695ed6773ee05eb2b4502edd69555252bdaaf442ecfb668" name="docker-unit-test" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="68.gitec8512b.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-59.git85d7426" date="1506081600">- reverted sources, the same file name should not have a different hash</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-60.git85d7426" date="1506427200">- Resolves: #1475768
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-61.git85d7426" date="1506427201">- reverted sources, the same file name should not have a different name</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-62.git85d7426" date="1508414400">- rhel subscription secrets info moved to skopeo-containers
- require skopeo-containers &gt;= 0.1.24-3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-63.git6f58874" date="1509624000">- built docker @projectatomic/docker-1.12.6 commit 6f58874
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-64.git61aa37c" date="1509710400">- Resolves: #1498553
- built docker @projectatomic/docker-1.12.6 commit 61aa37c
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-65.git61aa37c" date="1510056000">- adjust sources file</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-66.gitd6f7b83" date="1510228800">- built docker @projectatomic/docker-1.12.6 commit d6f7b83
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-67.gitec8512b" date="1510228801">- built docker @projectatomic/docker-1.12.6 commit ec8512b
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-68.gitec8512b" date="1510833600">- revert some docker.sysconfig deletions wrongly done in commit 3b003db</changelog>
</package>
<package pkgid="3c3ead1381755d7933717bd2ce86ad0c8c7c58d64297af3c982021115bdb6f98" name="docker-unit-test" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="71.git3e8e77d.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-62.git85d7426" date="1508414400">- rhel subscription secrets info moved to skopeo-containers
- require skopeo-containers &gt;= 0.1.24-3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-63.git6f58874" date="1509624000">- built docker @projectatomic/docker-1.12.6 commit 6f58874
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-64.git61aa37c" date="1509710400">- Resolves: #1498553
- built docker @projectatomic/docker-1.12.6 commit 61aa37c
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-65.git61aa37c" date="1510056000">- adjust sources file</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-66.gitd6f7b83" date="1510228800">- built docker @projectatomic/docker-1.12.6 commit d6f7b83
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-67.gitec8512b" date="1510228801">- built docker @projectatomic/docker-1.12.6 commit ec8512b
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-68.gitec8512b" date="1510833600">- revert some docker.sysconfig deletions wrongly done in commit 3b003db</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-69.gitec8512b" date="1511352000">- use oci-register-machine &gt;= 1:0-3.14</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-70.gitec8512b" date="1513080000">- Resolves: #1524634 - start daemon after registries.service</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-71.git3e8e77d" date="1513166400">- rebased to 3e8e77dcb88db0530c839b249bea7d75f9cd01d7
- https://bugzilla.redhat.com/show_bug.cgi?id=1518519</changelog>
</package>
<package pkgid="965db72800bcdd932cddcd3275d7a6b828570fbe738e43743c5cbad2ecb4e54a" name="docker-unit-test" arch="x86_64">
  <version epoch="2" ver="1.13.1" rel="53.git774336d.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-71.git3e8e77d" date="1513166400">- rebased to 3e8e77dcb88db0530c839b249bea7d75f9cd01d7
- https://bugzilla.redhat.com/show_bug.cgi?id=1518519</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-1.gitddee18e" date="1516795200">- built docker @projectatomic/docker-1.13.1-rhel commit ddee18e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 5ab4ab8</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-43.gitec9911e" date="1517313600">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-44.gitec9911e" date="1517486400">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-45.gitec9911e" date="1517486401">- c-s-s &gt;= 0.7.0-1</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-46.gitec9911e" date="1517832000">- Resolves: #1542112 - depend on oci-register-machine (disabled in config file)
- revert removal of oci-register-machine done in 2:1.13.1-1</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-47.gitec9911e" date="1517832001">- oci-register-machine &gt;= 1:0-5.13 (RE: #1542112)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-48.gitec9911e" date="1517832002">- Resolves: #1536726 - bump skopeo-containers dependency</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-52.gitce62987" date="1518436800">- Resolves: #1534827, #1543575
- built docker @projectatomic/docker-1.13.1-rhel commit ce62987
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 1ba8194</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-53.git774336d" date="1519128000">- Resolves: #1540540
- built docker @projectatomic/docker-1.13.1-rhel commit 774336d
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 5b117de
- built libnetwork commit 14db3c4</changelog>
</package>
<package pkgid="71472255e5528a3696ef79a95ed6088f56b074dd98a8f69c216b0c3f2b2be790" name="docker-v1.10-migrator" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="55.gitc4618fb.el7"/>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 2:1.12.6-46.git1680dd8" date="1500465600">- rebased runc to 79c3939053c870fbb4de5484d98640d5ba028ef4, #1471803</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-47.git0fdc778" date="1500465601">- Resolves: #1471218
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 4f960ae</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-48.git0fdc778" date="1500552000">- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-49.git0fdc778" date="1500984000">- changed permissions of /var/lib/docker and /etc/sysconfig/docker-storage, #1473785</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-50.git0fdc778" date="1501675200">- Resolves: #1428142, #1454371, #1454420, #1456184, #1470261, #1430905
- Resolves: #1446526, #1450221, #1451474, #1459268, #1461024, #1461071
- Resolves: #1464188, #1466242, #1464933, #1470640
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-51.gitc4618fb" date="1502193600">- Resolves: #1472974
- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-52.gitc4618fb" date="1502798400">- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 299e781</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-53.gitc4618fb" date="1503403200">- Resolves: #1484146
- need container-selinux &gt;= 2:2.21-2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-54.gitc4618fb" date="1503403201">- built oci-umount commit 8377044
- ensure diff between 1.12.6-51 and latest is only container-selinux NVR</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-55.gitc4618fb" date="1503576000">- Resolves: #1477787
- built oci-umount commit 6f0317a</changelog>
</package>
<package pkgid="087fe8c30f75a4c73745361bfab867da2b6a0709d5c297e87a396c44c29b9038" name="docker-v1.10-migrator" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="61.git85d7426.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-52.gitc4618fb" date="1502798400">- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 299e781</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-53.gitc4618fb" date="1503403200">- Resolves: #1484146
- need container-selinux &gt;= 2:2.21-2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-54.gitc4618fb" date="1503403201">- built oci-umount commit 8377044
- ensure diff between 1.12.6-51 and latest is only container-selinux NVR</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-55.gitc4618fb" date="1503576000">- Resolves: #1477787
- built oci-umount commit 6f0317a</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-56.git638a809" date="1505736000">- built docker @projectatomic/docker-1.12.6 commit 638a809
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 21c84aa</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-57.git85d7426" date="1505908800">- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-58.git85d7426" date="1505995200">- Resolves: #1455071
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-59.git85d7426" date="1506081600">- reverted sources, the same file name should not have a different hash</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-60.git85d7426" date="1506427200">- Resolves: #1475768
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-61.git85d7426" date="1506427201">- reverted sources, the same file name should not have a different name</changelog>
</package>
<package pkgid="86611ad44a618f131de82518cf5f26430e9cd35924ca064bc52f93a2a9b21e48" name="docker-v1.10-migrator" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="68.gitec8512b.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-59.git85d7426" date="1506081600">- reverted sources, the same file name should not have a different hash</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-60.git85d7426" date="1506427200">- Resolves: #1475768
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-61.git85d7426" date="1506427201">- reverted sources, the same file name should not have a different name</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-62.git85d7426" date="1508414400">- rhel subscription secrets info moved to skopeo-containers
- require skopeo-containers &gt;= 0.1.24-3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-63.git6f58874" date="1509624000">- built docker @projectatomic/docker-1.12.6 commit 6f58874
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-64.git61aa37c" date="1509710400">- Resolves: #1498553
- built docker @projectatomic/docker-1.12.6 commit 61aa37c
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-65.git61aa37c" date="1510056000">- adjust sources file</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-66.gitd6f7b83" date="1510228800">- built docker @projectatomic/docker-1.12.6 commit d6f7b83
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-67.gitec8512b" date="1510228801">- built docker @projectatomic/docker-1.12.6 commit ec8512b
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-68.gitec8512b" date="1510833600">- revert some docker.sysconfig deletions wrongly done in commit 3b003db</changelog>
</package>
<package pkgid="19e2c56d6193c67f99f2d7e9fe6179aaca53720a2ef73516822fb7d7c6cc7a70" name="docker-v1.10-migrator" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="71.git3e8e77d.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-62.git85d7426" date="1508414400">- rhel subscription secrets info moved to skopeo-containers
- require skopeo-containers &gt;= 0.1.24-3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-63.git6f58874" date="1509624000">- built docker @projectatomic/docker-1.12.6 commit 6f58874
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-64.git61aa37c" date="1509710400">- Resolves: #1498553
- built docker @projectatomic/docker-1.12.6 commit 61aa37c
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-65.git61aa37c" date="1510056000">- adjust sources file</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-66.gitd6f7b83" date="1510228800">- built docker @projectatomic/docker-1.12.6 commit d6f7b83
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-67.gitec8512b" date="1510228801">- built docker @projectatomic/docker-1.12.6 commit ec8512b
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-68.gitec8512b" date="1510833600">- revert some docker.sysconfig deletions wrongly done in commit 3b003db</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-69.gitec8512b" date="1511352000">- use oci-register-machine &gt;= 1:0-3.14</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-70.gitec8512b" date="1513080000">- Resolves: #1524634 - start daemon after registries.service</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-71.git3e8e77d" date="1513166400">- rebased to 3e8e77dcb88db0530c839b249bea7d75f9cd01d7
- https://bugzilla.redhat.com/show_bug.cgi?id=1518519</changelog>
</package>
<package pkgid="51adc5c633949cf14b34fb485377e49d3fd8cf7eea783b79193fb586c07fa382" name="docker-v1.10-migrator" arch="x86_64">
  <version epoch="2" ver="1.13.1" rel="53.git774336d.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-71.git3e8e77d" date="1513166400">- rebased to 3e8e77dcb88db0530c839b249bea7d75f9cd01d7
- https://bugzilla.redhat.com/show_bug.cgi?id=1518519</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-1.gitddee18e" date="1516795200">- built docker @projectatomic/docker-1.13.1-rhel commit ddee18e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 5ab4ab8</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-43.gitec9911e" date="1517313600">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-44.gitec9911e" date="1517486400">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-45.gitec9911e" date="1517486401">- c-s-s &gt;= 0.7.0-1</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-46.gitec9911e" date="1517832000">- Resolves: #1542112 - depend on oci-register-machine (disabled in config file)
- revert removal of oci-register-machine done in 2:1.13.1-1</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-47.gitec9911e" date="1517832001">- oci-register-machine &gt;= 1:0-5.13 (RE: #1542112)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-48.gitec9911e" date="1517832002">- Resolves: #1536726 - bump skopeo-containers dependency</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-52.gitce62987" date="1518436800">- Resolves: #1534827, #1543575
- built docker @projectatomic/docker-1.13.1-rhel commit ce62987
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 1ba8194</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-53.git774336d" date="1519128000">- Resolves: #1540540
- built docker @projectatomic/docker-1.13.1-rhel commit 774336d
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 5b117de
- built libnetwork commit 14db3c4</changelog>
</package>
<package pkgid="842e8cb6c19ca5fbb9e43ae079ca46de2655e38723e0f0af02c79b775df04ed6" name="dpdk" arch="x86_64">
  <version epoch="0" ver="16.11.2" rel="4.el7"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 2.2.0-3" date="1458129600">- Disable librte_vhost NUMA support for now, it causes segfaults</changelog>
  <changelog author="Flavio Leitner &lt;fbl@redhat.com&gt; - 16.04-4" date="1469102400">- Updated to DPDK 16.04</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 16.07-1" date="1475668800">- Update to DPDK 16.07 (#1383195)
- Disable unstable bnx2x driver (#1330589)
- Enable librte_vhost NUMA support again (#1279525)
- Enable librte_cryptodev, its no longer considered experimental
- Change example prefix to dpdk- for consistency with other utilities
- Update driverctl to 0.89</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 16.11-2" date="1481198400">- Update to DPDK 16.11 (#1335865)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 16.11-3" date="1486036800">- Make driverctl a different package</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 16.11-4" date="1490184000">- Avoid infinite loop while linking with libdpdk.so (#1434907)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 16.11.2-1" date="1496923200">- Import from fdProd
- Update to 16.11.2 (#1459333)</changelog>
  <changelog author="John W. Linville &lt;linville@redhat.com&gt; - 16.11.2-2" date="1496923201">- Enable aarch64, ppc64le (#1428587)</changelog>
  <changelog author="John W. Linville &lt;linville@redhat.com&gt; - 16.11.2-3" date="1497009600">- Enable i40e driver in PowerPC along with its altivec intrinsic support
- Add PCI probing support for vfio-pci devices in Power8</changelog>
  <changelog author="John W. Linville &lt;linville@redhat.com&gt; - 16.11.2-4" date="1498219200">- Backport "eal/ppc: fix mmap for memory initialization"</changelog>
</package>
<package pkgid="e5eb45cbab5891b14e9dfc63ee72e43025d484df2a5b7b166b5f7c82c52e76e2" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="16.11.2" rel="4.el7"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 2.2.0-3" date="1458129600">- Disable librte_vhost NUMA support for now, it causes segfaults</changelog>
  <changelog author="Flavio Leitner &lt;fbl@redhat.com&gt; - 16.04-4" date="1469102400">- Updated to DPDK 16.04</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 16.07-1" date="1475668800">- Update to DPDK 16.07 (#1383195)
- Disable unstable bnx2x driver (#1330589)
- Enable librte_vhost NUMA support again (#1279525)
- Enable librte_cryptodev, its no longer considered experimental
- Change example prefix to dpdk- for consistency with other utilities
- Update driverctl to 0.89</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 16.11-2" date="1481198400">- Update to DPDK 16.11 (#1335865)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 16.11-3" date="1486036800">- Make driverctl a different package</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 16.11-4" date="1490184000">- Avoid infinite loop while linking with libdpdk.so (#1434907)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 16.11.2-1" date="1496923200">- Import from fdProd
- Update to 16.11.2 (#1459333)</changelog>
  <changelog author="John W. Linville &lt;linville@redhat.com&gt; - 16.11.2-2" date="1496923201">- Enable aarch64, ppc64le (#1428587)</changelog>
  <changelog author="John W. Linville &lt;linville@redhat.com&gt; - 16.11.2-3" date="1497009600">- Enable i40e driver in PowerPC along with its altivec intrinsic support
- Add PCI probing support for vfio-pci devices in Power8</changelog>
  <changelog author="John W. Linville &lt;linville@redhat.com&gt; - 16.11.2-4" date="1498219200">- Backport "eal/ppc: fix mmap for memory initialization"</changelog>
</package>
<package pkgid="8b77f2b9a42a8b23c7f7a4589f63976f45b215e90c94ade3d9304ab1385fdcf6" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="16.11.2" rel="4.el7"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 2.2.0-3" date="1458129600">- Disable librte_vhost NUMA support for now, it causes segfaults</changelog>
  <changelog author="Flavio Leitner &lt;fbl@redhat.com&gt; - 16.04-4" date="1469102400">- Updated to DPDK 16.04</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 16.07-1" date="1475668800">- Update to DPDK 16.07 (#1383195)
- Disable unstable bnx2x driver (#1330589)
- Enable librte_vhost NUMA support again (#1279525)
- Enable librte_cryptodev, its no longer considered experimental
- Change example prefix to dpdk- for consistency with other utilities
- Update driverctl to 0.89</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 16.11-2" date="1481198400">- Update to DPDK 16.11 (#1335865)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 16.11-3" date="1486036800">- Make driverctl a different package</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 16.11-4" date="1490184000">- Avoid infinite loop while linking with libdpdk.so (#1434907)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 16.11.2-1" date="1496923200">- Import from fdProd
- Update to 16.11.2 (#1459333)</changelog>
  <changelog author="John W. Linville &lt;linville@redhat.com&gt; - 16.11.2-2" date="1496923201">- Enable aarch64, ppc64le (#1428587)</changelog>
  <changelog author="John W. Linville &lt;linville@redhat.com&gt; - 16.11.2-3" date="1497009600">- Enable i40e driver in PowerPC along with its altivec intrinsic support
- Add PCI probing support for vfio-pci devices in Power8</changelog>
  <changelog author="John W. Linville &lt;linville@redhat.com&gt; - 16.11.2-4" date="1498219200">- Backport "eal/ppc: fix mmap for memory initialization"</changelog>
</package>
<package pkgid="69d636adda7777e7e70c8e7038686493e1991f35c88a98ed85d6aed8d2a1a8b6" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="16.11.2" rel="4.el7"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 2.2.0-3" date="1458129600">- Disable librte_vhost NUMA support for now, it causes segfaults</changelog>
  <changelog author="Flavio Leitner &lt;fbl@redhat.com&gt; - 16.04-4" date="1469102400">- Updated to DPDK 16.04</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 16.07-1" date="1475668800">- Update to DPDK 16.07 (#1383195)
- Disable unstable bnx2x driver (#1330589)
- Enable librte_vhost NUMA support again (#1279525)
- Enable librte_cryptodev, its no longer considered experimental
- Change example prefix to dpdk- for consistency with other utilities
- Update driverctl to 0.89</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 16.11-2" date="1481198400">- Update to DPDK 16.11 (#1335865)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 16.11-3" date="1486036800">- Make driverctl a different package</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 16.11-4" date="1490184000">- Avoid infinite loop while linking with libdpdk.so (#1434907)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 16.11.2-1" date="1496923200">- Import from fdProd
- Update to 16.11.2 (#1459333)</changelog>
  <changelog author="John W. Linville &lt;linville@redhat.com&gt; - 16.11.2-2" date="1496923201">- Enable aarch64, ppc64le (#1428587)</changelog>
  <changelog author="John W. Linville &lt;linville@redhat.com&gt; - 16.11.2-3" date="1497009600">- Enable i40e driver in PowerPC along with its altivec intrinsic support
- Add PCI probing support for vfio-pci devices in Power8</changelog>
  <changelog author="John W. Linville &lt;linville@redhat.com&gt; - 16.11.2-4" date="1498219200">- Backport "eal/ppc: fix mmap for memory initialization"</changelog>
</package>
<package pkgid="5b4b12c6f7943b591b7fe7196ff33ce7bc1a67e41826fdbce21500ae6595166a" name="dracut" arch="x86_64">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="e8461c48e2af741d8e961f7d97956e8a208945126c212e2588df94b9d03a4208" name="dracut-caps" arch="x86_64">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="ba023d815ae2ecf1bd92f42bbd29f84d646ebb2859b229051c69c7159f65577e" name="dracut-config-generic" arch="x86_64">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="e8f89dc6190e9e450cbf0a12daad546f9b646c29efe7f7fa28c7a5574d64d81c" name="dracut-config-rescue" arch="x86_64">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="d8245eb2340cc1a3f272377e01819533c15df6440504fcb6e973ac6654b4fad0" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="e414ab378660f84fd3d95f1557fb95f95d9d1b4af4421a9ad17d2985db4a3ba9" name="dracut-fips-aesni" arch="x86_64">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="3b7caa4e7c5367b23344f3299de2cf149b660dd14c7d49d4f12d21865939cb0a" name="dracut-network" arch="x86_64">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="01b18497564d42b8f08b815e07b2b9a45ec44c565c1e2a5d9b251197af0b0caa" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="980b8f7cf0a41deecc246733f20b3541d0192592ef4ee027d6e8cdce7024de89" name="emacs" arch="x86_64">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="5e0ec5d799f424707506d58fecfb531f0970d6c3b4eb8367b0c03889086df181" name="emacs-common" arch="x86_64">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="a64b837f5da75c78b2ad6d093af602d3b26c35c2fada954f834c75cd7b202524" name="emacs-el" arch="noarch">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="f245173586320592fed1e7ce40a23b19f1770b20e40189df91fd24740e90a659" name="emacs-filesystem" arch="noarch">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="60c1cef67f42275b9d639e037923bcc38cef53f79a94ea499fb1a6cf07136e40" name="emacs-git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="bb464490f61608645ebf44fd307db2e5b27d211ef870d92dc700833ce6c1e480" name="emacs-git-el" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="4bc12c25a19c42a1bbe6b596cf7921fdd1886156b453088fa2936041defab2b0" name="emacs-mercurial" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="917dd15e1d5f9a83fc9d7e7395ca39dcfabe7e0249bf3e780c516a54be4ee5fc" name="emacs-mercurial-el" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="3bd80aaeac10cffbfb68fd2e58e9d1301a127c0dba74ce7c8f2cdf30e85b0bcd" name="emacs-nox" arch="x86_64">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="a8e7f25a17972a6476c1142b728c48de4f35b2586138ae080608c4c96d469a24" name="emacs-terminal" arch="noarch">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="bd66d7bfcebdf24eb960551468fd450786c492f2cd35f85ca0cf650b39f521ee" name="etcd" arch="x86_64">
  <version epoch="0" ver="3.2.11" rel="1.el7"/>
  <changelog author="Scott Dodson &lt;sdodson@redhat.com&gt; - 3.1.9-1" date="1497009600">- Update to 3.1.9
  resolves: #1458941</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.9-2" date="1497268800">- Build for secondary architectures as well</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.5-1" date="1502193600">- Update to 3.2.5
  resolves: #1479371</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.7-1" date="1505822400">- Update to 3.2.7
  resolves: #1493165</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.7-2" date="1506686400">- Rebuild with correct hardening flags
  resolves: #1420783</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.9-1" date="1510056000">- Update to 3.2.9
  resolves: #1510480
- Generate etcd and etcdctl man-pages
  resolves: #1444336</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.9-2" date="1511179200">- Fix Synopsis of etcdctl3 man pages
  related: #1510480</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.9-3" date="1511179201">- Bump man-pages tarball
  related: #1510480</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.10-1" date="1511265600">- Update to 3.2.10
  resolves: #1514612</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.11-1" date="1512561600">- Update to 3.2.11
  related: #1514612</changelog>
</package>
<package pkgid="c8431054e339bbf1e21cf1a3454bb79c7831f8e3f125e3dae5ddb7557934f24a" name="etcd" arch="x86_64">
  <version epoch="0" ver="3.2.15" rel="1.el7"/>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.9-2" date="1497268800">- Build for secondary architectures as well</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.5-1" date="1502193600">- Update to 3.2.5
  resolves: #1479371</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.7-1" date="1505822400">- Update to 3.2.7
  resolves: #1493165</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.7-2" date="1506686400">- Rebuild with correct hardening flags
  resolves: #1420783</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.9-1" date="1510056000">- Update to 3.2.9
  resolves: #1510480
- Generate etcd and etcdctl man-pages
  resolves: #1444336</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.9-2" date="1511179200">- Fix Synopsis of etcdctl3 man pages
  related: #1510480</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.9-3" date="1511179201">- Bump man-pages tarball
  related: #1510480</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.10-1" date="1511265600">- Update to 3.2.10
  resolves: #1514612</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.11-1" date="1512561600">- Update to 3.2.11
  related: #1514612</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.15-1" date="1517227200">- Update to 3.2.15
  resolves: #1539670
  resolves: #1378706</changelog>
</package>
<package pkgid="83f7496c2aeeb2b23fb28828c351f78f6b9a9cad114958b930b6cc7780dfd6d0" name="etcd" arch="x86_64">
  <version epoch="0" ver="3.2.5" rel="1.el7"/>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 3.1.0-1.1" date="1487246400">- Rebuild rebase on all architectures</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.0-2" date="1487678400">- Apply "add --keep-cluster-id and --node-id to 'etcdctl backup'"
  from extras-rhel-7.2 branch
  resolves: #1350875</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 3.1.0-2.1" date="1488196800">- Rebuild rebase on all architectures</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.3-1" date="1490097600">- Update to 3.1.3
  resolves: #1434364</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.1.3-2" date="1491307200">- Circumvent runtime check of officially supported architectures
  resolves: #1434973</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.7-1" date="1493726400">- Update to 3.1.7
  resolves: #1447235</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.8-1" date="1496750400">- Update to 3.1.8
  resolves: #1459122</changelog>
  <changelog author="Scott Dodson &lt;sdodson@redhat.com&gt; - 3.1.9-1" date="1497009600">- Update to 3.1.9
  resolves: #1458941</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.9-2" date="1497268800">- Build for secondary architectures as well</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.5-1" date="1502193600">- Update to 3.2.5
  resolves: #1479371</changelog>
</package>
<package pkgid="54ab3a91788e4c8727949b384af2bec9cfc14d2af75ef07532a9652112100e7d" name="etcd" arch="x86_64">
  <version epoch="0" ver="3.2.7" rel="1.el7"/>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.0-2" date="1487678400">- Apply "add --keep-cluster-id and --node-id to 'etcdctl backup'"
  from extras-rhel-7.2 branch
  resolves: #1350875</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 3.1.0-2.1" date="1488196800">- Rebuild rebase on all architectures</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.3-1" date="1490097600">- Update to 3.1.3
  resolves: #1434364</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.1.3-2" date="1491307200">- Circumvent runtime check of officially supported architectures
  resolves: #1434973</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.7-1" date="1493726400">- Update to 3.1.7
  resolves: #1447235</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.8-1" date="1496750400">- Update to 3.1.8
  resolves: #1459122</changelog>
  <changelog author="Scott Dodson &lt;sdodson@redhat.com&gt; - 3.1.9-1" date="1497009600">- Update to 3.1.9
  resolves: #1458941</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.9-2" date="1497268800">- Build for secondary architectures as well</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.5-1" date="1502193600">- Update to 3.2.5
  resolves: #1479371</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.7-1" date="1505822400">- Update to 3.2.7
  resolves: #1493165</changelog>
</package>
<package pkgid="a6532346c7ea5d13af77951580db82de1a4d94b294198726027c6cdd2de2c1ec" name="etcd" arch="x86_64">
  <version epoch="0" ver="3.2.9" rel="3.el7"/>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.7-1" date="1493726400">- Update to 3.1.7
  resolves: #1447235</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.8-1" date="1496750400">- Update to 3.1.8
  resolves: #1459122</changelog>
  <changelog author="Scott Dodson &lt;sdodson@redhat.com&gt; - 3.1.9-1" date="1497009600">- Update to 3.1.9
  resolves: #1458941</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.9-2" date="1497268800">- Build for secondary architectures as well</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.5-1" date="1502193600">- Update to 3.2.5
  resolves: #1479371</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.7-1" date="1505822400">- Update to 3.2.7
  resolves: #1493165</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.7-2" date="1506686400">- Rebuild with correct hardening flags
  resolves: #1420783</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.9-1" date="1510056000">- Update to 3.2.9
  resolves: #1510480
- Generate etcd and etcdctl man-pages
  resolves: #1444336</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.9-2" date="1511179200">- Fix Synopsis of etcdctl3 man pages
  related: #1510480</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.9-3" date="1511179201">- Bump man-pages tarball
  related: #1510480</changelog>
</package>
<package pkgid="a227bbdc0adc29d06b45752deb14471e900650bb7ba8232fb286691be56de44f" name="fence-agents-all" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="1d4d0b36b122d49a8b7be20a7f572dcdf949e7408234414785164d2a9ee820e4" name="fence-agents-all" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="a1ba973e0161bd8c6b116ee8fee59ae04232d2d00eb9c639aa03cee61c00c3d9" name="fence-agents-all" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="7afbac0bd0e84e6845ab603cb5667c0e59b7058ada1bacaac44d4865489677e0" name="fence-agents-apc" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="d10c2ef8c76a0a925b5ac49b389c0fe08b6dfd312266b4e89ba9881352aa24e7" name="fence-agents-apc" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="d4f9f7428fddf55f01974cd8455aa2e8b468f9fbb7af1b98fd6436887acb8282" name="fence-agents-apc" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="325eab3406f058af60a5056af8d54e60d8e7e4629d9791d4acdb4597df9bdc04" name="fence-agents-apc-snmp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="c1827b353cfa3e21136a0c5a24b9dc9c761757042a64d47c4015c39d9df6dbb0" name="fence-agents-apc-snmp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="b2fa6e3cbdad7e9beb26d978a760bc06f7e03d248d28bcf52ee85659a049148d" name="fence-agents-apc-snmp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="d6e974eb0508f42a749d7ba34ea58586005635eabffa33f805706219fc4aea3c" name="fence-agents-bladecenter" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="77afcf22e2bb331fbf2baf19386b91d0522bc19ba4c62aa367163bb7aa7e8e83" name="fence-agents-bladecenter" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="8a8dc41c1fbd79b6c132f9a85d2cfa23bfa93217fa7ecb5e511202dffa810672" name="fence-agents-bladecenter" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="9ecd708b5672dec866b28b996b3675eff7d27a9842fb8428a873046b0ec3827c" name="fence-agents-brocade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="34663a485260d14c9cf0c2eda8c98d29dc88626e64aa21b186854e82b6a81e32" name="fence-agents-brocade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="4f94ca53e7202d2e227410009a11f0b1c6f1dbde3a2807320c99eb479bbf4e59" name="fence-agents-brocade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="607c89c280b50a3cb40078fef31db78a8cfa935cfe84e06dce17354fb5d4c0f2" name="fence-agents-cisco-mds" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="67c4bbe7081d247124d6c3e2eb2fbee544a14070fc10efdc1d10d4c383c61a87" name="fence-agents-cisco-mds" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="0b7e617c6a7db3e0c6395832ad3d538aba4af1bb7777a53ecb284dcd55a52c46" name="fence-agents-cisco-mds" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="09b3fe1795916468145aec3713c9cd6b3eada0062393afdcb2f90743ffc5fe65" name="fence-agents-cisco-ucs" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="4169ee660e69e37f302d55737c2dfa06b400b63f0dd20c90bfe8af35c2b8d564" name="fence-agents-cisco-ucs" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="69a74cd5be87a09520bc904ad288da42ab2e81bbb38db59619aafe2f174469ff" name="fence-agents-cisco-ucs" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="16bdd9f8a656eead893d3ca30db607caebf58049a0bf60c906007258a58e0aa1" name="fence-agents-common" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="492f879891f890596bae465b0b7f028e62a045644c741ae59a39d411a2b829cc" name="fence-agents-common" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="b05296dad8ddcbc9e8e1e805624ea7127f1faf195662f558b6ef611134722339" name="fence-agents-common" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="b7c65b09f8d75fe88bdfe97b5f02d8b905acb22567e6fab2758e869f34d69625" name="fence-agents-compute" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="a2076da8703f0003c687344f3458f7ef1992af4e67c2026ccb7b7bd0acfe4762" name="fence-agents-compute" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="810a2c4a445e8a6f808509bf0b1b1939b09680c28ea112ce18c6e01084d7452e" name="fence-agents-compute" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="f0a900e546fbde3580364ae27238b02a48644eef0cc8f50cee8fa7068e772e7f" name="fence-agents-drac5" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="8858c089e73b60a720f22ab731f93ab303304c52f0b05b6a82f18f06fbd3a8a1" name="fence-agents-drac5" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="56c99ba7427ee067c65671c6c5939df658728f6bcc5078f9bcdcd2fe994466fe" name="fence-agents-drac5" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="1866f5d44355846871159cf86a50e79f103680cc1f1a8a440ff892957716f3aa" name="fence-agents-eaton-snmp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="b761752da0b72e186515040e69a9203bd54b0e7865b0c72598babbb609098693" name="fence-agents-eaton-snmp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="6605be173e3a52b0156c9ca8b01f80825689db8094a3b7f7a206bebe5bcaca3b" name="fence-agents-eaton-snmp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="e0c9c65ce68d7615450ac31005214681ab87532f20a6c2bef95bdd200a283931" name="fence-agents-emerson" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="63d7340281767ea66b32997679dae7433c8a2b824eb47a6b52ea60825e83d79d" name="fence-agents-emerson" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="db4aede521bee63edbde6057c5c03c91309c5a4eb8ddc8ad2006055eaf76051b" name="fence-agents-emerson" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="2c32a8164abf1c1f1bb03b87c8b756f7a91079babc85832e166631b2333bb075" name="fence-agents-eps" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="fc593098e949bbfe13903b562b7cae6cc7ba9e51da166b4fc61925d26b500ee9" name="fence-agents-eps" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="9348035447f8cdf1101f0b1b4f9de5bb6594a0db89361e15c0be1970f8974240" name="fence-agents-eps" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="6198d1e095b43e42631b351af09a319deb052f6c9c6f87181506299a2471fdfb" name="fence-agents-hpblade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="62ab7aabb52d4af19493bba5ba465bc1701df661bd6070f06a1a3be473fe36c8" name="fence-agents-hpblade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="6d1dec3d8a7c75dd05b2584f59d26670b7bf9a5662120c4cf8c8b5a9b0bb6d6a" name="fence-agents-hpblade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="072db7039e5c8627d1a19d976fdab6c45a5cdac845d1727cc3b6d2182e5e0890" name="fence-agents-ibmblade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="a9746871a4a7288be5539b5f42550d41a6f0c76f8b8c8ec03dc59d63b0a19cb1" name="fence-agents-ibmblade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="cb1f6695c33da952405c31b90beceeb47a3d89ba5a1dae319e30ded950f2a3b4" name="fence-agents-ibmblade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="e3e31cc32bf9fccaeb9bd6bde4aadd7ec157c998b0392fd96bffa51bf99ce87d" name="fence-agents-ifmib" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="0a5dcceffbc7b1e4c990da64dda480d8fc88933d31a44ad01cf1e9c3152bc4b9" name="fence-agents-ifmib" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="99e0fcdaaac228aa626930e1cbc4bdcaf58895137a1586d7122e2a30e35950b8" name="fence-agents-ifmib" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="8ac792682db0479bbd45ad15d647321393d3d87130cfdac098684a04bc815afe" name="fence-agents-ilo-moonshot" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="8b381eb95512d2e6191264738a726ecc6fc0b8b848d1fdf704827518d17e3b11" name="fence-agents-ilo-moonshot" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="b0fea139acde0aa4d32b13c653c3999148264dec723930620a9675c1275a6dda" name="fence-agents-ilo-moonshot" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="1c039a1ba7966ff07b8365ea1c54921e22db80c73448afbb79d8493c9f7419e7" name="fence-agents-ilo-mp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="9793227aa9e3d0ba0fc8530b4e9e9fa3aee961a856cd69e78812d8f6f77147c0" name="fence-agents-ilo-mp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="84318995a73f6be42b1039851fd2ca4bb9b5b11194508c172a2c9bbb97949c94" name="fence-agents-ilo-mp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="7f9f2ed0a0f7631a44863221313926c68172b9fdd7edbd2fbb629d85caffe5e1" name="fence-agents-ilo-ssh" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="aac06f69fa57b93b5c4c41447e3a3d3e19668c0573b1a0c0b2fef34ea27e3636" name="fence-agents-ilo-ssh" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="3a71141c612a2e8824588e919e467c89a5ee9e09fa9e98952bf46266844524aa" name="fence-agents-ilo-ssh" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="1ae7bdf634609523e1489914f9eba317a9d10035230c7ce0db1fcd71ddccda01" name="fence-agents-ilo2" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="2a6e06afc4e66d0a7afbe90818f0c079dd456f8bfbf352a4be0edb073905127a" name="fence-agents-ilo2" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="8c2a2c53c28a85f5993c6e962249b6d3ce6d88687affba3be218b701c81217ff" name="fence-agents-ilo2" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="3d6580882bf8720eac06ed6953e0ca19f3ec9794d005945ceb710c664980dc1f" name="fence-agents-intelmodular" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="e40ab5655557c4c0a1b81cb0087cbe375070ca1c3f9596a6b1d9804d5a2af72d" name="fence-agents-intelmodular" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="3f0c71bbc8dc724324ea84fe2229cff757ce6e1cd544b1471a14c5e8504b20ef" name="fence-agents-intelmodular" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="32e004e299cb1e24d0310d399749b8c8d314802d5dd207a93a768be6190f902c" name="fence-agents-ipdu" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="9e4dac846a092ce12263c08f58667fbe51340bafe0489745f28a91ba5d0eafc4" name="fence-agents-ipdu" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="7ff1b8a0888a9829ad948a3fff2de1e5e2897d5d9b92734f3b1f2b3717b9d3bd" name="fence-agents-ipdu" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="7eec75d94db049367ba037663ae83e0fc39077ab5e93f2a8f08294ba1754532e" name="fence-agents-ipmilan" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="89344464c46d5a8f611d691e2c371f4c7de9ec5a5a0c8ab106ab6b7ab1b379b1" name="fence-agents-ipmilan" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="ea8a7ab79f5a64ca0d195ac70a7680b56f22303e7b0f1334786f78894e3e1c7d" name="fence-agents-ipmilan" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="879df8be116c573171fc03aa97c22e753376e1a4b771f79980346bd9e4ecff8f" name="fence-agents-kdump" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="c4d57d3fdf1040bc70a1526bc020b7499bd7a2e45dd84d4fcc1f933ecc41178a" name="fence-agents-kdump" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="f125fdb9b1d6a5724a2fbcb9b0a5074d66b4d00e16ab79a299a101e42f8c3cb3" name="fence-agents-kdump" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="d41fc9a637df05004451cf5776fa2af25c83bb0df03d753956229f81562b7d72" name="fence-agents-mpath" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="1bf962d8ed5cce92b8fdc55d7cab4099dc981176a947b9cf0184cc4fd34a713e" name="fence-agents-mpath" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="0d21bd21857f5e170316c4da7ff1f4d59af2a327328a713f26c2d859112d193c" name="fence-agents-mpath" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="4ba979f0800082a38751238d3bd30ac2d3257304da2bdb11641b8cb0949d57a6" name="fence-agents-rhevm" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="50115a685cd227aa178d73894bdbf7e967a8d378f32a5ce2728e237ab51b5e01" name="fence-agents-rhevm" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="612309d7b5b4cf37fe3c539a9600a7b2cdf0f2ed5eaf84759351efeb9f95c3ab" name="fence-agents-rhevm" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="25dcd832188d8024f8d1d93af599096237d42ed81d990d10b82991919a760884" name="fence-agents-rsa" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="9c22cbcd510ef3f6bdf84e37a1c73fbe89ed22066c40d53ff54c88d6dc02a093" name="fence-agents-rsa" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="4b4536013722e13663e10be1c3911b73afdf7c5b48d264f3138c4a5b132c605f" name="fence-agents-rsa" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="a639e49ddf3f7cd1f82cbf4a862fa2439cd395808a7c2ca7d2df6f1dbb4de79f" name="fence-agents-rsb" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="9223f7c347fea91dead7971ea81d6f5f1f9df6d068c9bb0ba6e18f6103aaeb08" name="fence-agents-rsb" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="b9f353b899d9d520febf88384f5f0daaf3d28262050f78a571450d866aec0fb9" name="fence-agents-rsb" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="9fef15f01d758740420cdfe00b743e3562e6f5936e6fb88aa0e4bf3f97d9acc7" name="fence-agents-sbd" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="170ee62086b2999f62e102f101e7823cd068891e3f0e68f0479951d791baf5d4" name="fence-agents-sbd" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="27a97de8edd8866d1258675fb5e224527a4dc368b32c85a78f75e4218060215b" name="fence-agents-sbd" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="c3c7b0f4d676c6a5eb1a57e8a27fc6ea3764f5edaff7dfbae7e74dc901f00948" name="fence-agents-scsi" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="7ce1aa08d71c8a2973e116bb8ab4e6937f2fac3690f7c7a28076f58d204c85d5" name="fence-agents-scsi" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="a040e7014690b73a88c57b16515c41e54ec612841a61198dc406c6bb71015fd8" name="fence-agents-scsi" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="8c8a08181768adb94ea172744c449afdf1568c850deb20030dd7971002b6eaa2" name="fence-agents-virsh" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="092c20b57a76d7d52a4b12dea7212d35c2a095f887867679417cf7b4321770fb" name="fence-agents-virsh" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="3997129e3282b99dc20c6c52c93fc926e96fe1a3ae142e4091377091510bdd55" name="fence-agents-virsh" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="7aa55f41541fedcb1033beb4f931d24ce48e74d1420f53487ca66724d5d9b405" name="fence-agents-vmware-soap" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="37a1942c0a61d9c78efb1381c10918e49d986f004284e4bf5d05516451def843" name="fence-agents-vmware-soap" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="ab91b451ad16780cf0f84b8c7cb42a76023a4a0ca6a607ad1779ec8ebd98af75" name="fence-agents-vmware-soap" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="58450d9fac9c44ac911df987c51ff77bd4c2b018c2f3fdd749f523c95fa42d45" name="fence-agents-wti" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="00b67d0ba2f0d880e88c0de75ca2964d7e08ab52fc288fb2457ade4f28087bf9" name="fence-agents-wti" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="c03718d30ed99ec3c64e9a33c69f333fed0eeaa074d73c085b040f84b6434056" name="fence-agents-wti" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="3c384c6891fc8c20c36ae6ee208430188a1fd1c00e27161a873e70e9b397c824" name="firefox" arch="x86_64">
  <version epoch="0" ver="52.3.0" rel="2.el7_4"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-1" date="1488283200">- Update to 52.0ESR (B1)
- Build RHEL7 package for Gtk3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-2" date="1488369600">- Enable system nss</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-2" date="1501761600">- Update to 52.3.0 ESR (b2)</changelog>
</package>
<package pkgid="900150be66cc0e5fe6cc49d8e2356434f4aa099e5eb9175e176dfc91817e0d8a" name="firefox" arch="i686">
  <version epoch="0" ver="52.4.0" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-2" date="1488369600">- Enable system nss</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
</package>
<package pkgid="cf02e38f3d089dee6937d25c8202e47a1f57524e6cc56d157d8c2760b2bc388d" name="firefox" arch="x86_64">
  <version epoch="0" ver="52.4.0" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-2" date="1488369600">- Enable system nss</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
</package>
<package pkgid="14927cfb26d1b7a63b7a844138c7c2c40ee034b5330239296608bd6052b08031" name="firefox" arch="i686">
  <version epoch="0" ver="52.5.0" rel="1.el7_4"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
</package>
<package pkgid="cf41b68bfa7c9a11a957ae7c87d6ba4a76992bda16a2821e52646f59fc546b3a" name="firefox" arch="x86_64">
  <version epoch="0" ver="52.5.0" rel="1.el7_4"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
</package>
<package pkgid="1677ecffc3936a0d1dea5930eedc3676a6184cecb641bdec2f94957993267502" name="firefox" arch="i686">
  <version epoch="0" ver="52.5.1" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
</package>
<package pkgid="bbee4f28980f7a97b2997a6b44e407301c91a440c112394a60b211d94599f543" name="firefox" arch="x86_64">
  <version epoch="0" ver="52.5.1" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
</package>
<package pkgid="4184ec543730f2c28833a4ee1c7e7860ca428c3f64064e6d5f9cc5bd204326a6" name="firefox" arch="i686">
  <version epoch="0" ver="52.6.0" rel="1.el7_4"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-1" date="1516276800">- Update to 52.6.0 ESR</changelog>
</package>
<package pkgid="389e91ba5be4ce3f9e64ca58272699d6a7cade17a73d7ebe74fbe22d57472e0c" name="firefox" arch="x86_64">
  <version epoch="0" ver="52.6.0" rel="1.el7_4"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-1" date="1516276800">- Update to 52.6.0 ESR</changelog>
</package>
<package pkgid="808a8497ef7b61a7504d8e5d4e0d2103f806463021e61f8541c52fbaa126f5f0" name="firefox" arch="i686">
  <version epoch="0" ver="52.7.0" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
</package>
<package pkgid="0da4684ea96f93346fc66d0ea449a8518abaffdab4f152543254778975952c71" name="firefox" arch="x86_64">
  <version epoch="0" ver="52.7.0" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
</package>
<package pkgid="efd9556dd6ff91f07062948a50a6f295a5d82d1714b9159e0014010327261c70" name="firefox" arch="i686">
  <version epoch="0" ver="52.7.2" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
</package>
<package pkgid="ca14d0faceeb28167a20b62b4b40f2cfbd7f94b317936e59305e215dee3bfcf3" name="firefox" arch="x86_64">
  <version epoch="0" ver="52.7.2" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
</package>
<package pkgid="2b181b635577784b02c20f909a981823f30224629735a5bcc5df91cf8c64b37a" name="flatpak" arch="i686">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="02d1d96f54a21b254b7841cd24e22841ab06f334fa770ea5d20d126df800c930" name="flatpak" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="93c23e8509785a024829dab8ebad54ff84cd7bbe2dd0d0121177ebe8d2f8fe4b" name="flatpak-builder" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="c161954d26b3734b75ae81b6af90d55cbb7e51723415f6a2472b6c456ab70c84" name="flatpak-devel" arch="i686">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="caad331003a6242296587b708c32e64b1e21007940cc126129c1e50e9a1caad3" name="flatpak-devel" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="aac5f74830f884a299f0b7181bc949c242d723a8abe029cbd622ca4cbc1cf30f" name="flatpak-libs" arch="i686">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="06194ec57590b46ed7404c79bf4a940ebb628542b723e8160e072d183dd24c9a" name="flatpak-libs" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="9bcc4e50f00792eeb8659ceae21d89b60c5140538ea151d532f2b98b0b018c0a" name="gcab" arch="x86_64">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="791f882b9f0cc53ea6f5680574d31a6c27cfa38f5863656394593f7f52829f5c" name="gcc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="9da9403ed1fdca0ea4a9bbafb1bac1887075aa4ef4f67e5fbd59386a7d0af89d" name="gcc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="a4f8f353c1f4fd91e5cb37cf0037a946500e112c0da14f6624a4527fb93d1650" name="gcc-c++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="889c36e28c0a02e417adc7820c76261fd85ad31c29d376234afdc171acd44866" name="gcc-c++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="720c9df7061995ef06ca08bf69d96a2396d1b29d5dd4335d77bea6718a7360a7" name="gcc-gfortran" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="4ea63cd89ec519c117a3a9a4a3e69372d22f95b4ec63d639dcc1c817918d92f2" name="gcc-gfortran" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="a273ee09f5d1a96aa3173c75456f302fdec1ac7451bcc7a19d34d77c863375c2" name="gcc-gnat" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="59ca348329e82b76356bde32fcada8cdcd1491c1b9e8954729515ed1f5e89155" name="gcc-gnat" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="ca977671b3c1ebdeceaf5899503fdf9e790f55db92e2a5e88a1e23198e4306e7" name="gcc-go" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="50f3d609b00b70d96c625fd65a9a9e78c40b4b20906e33a07ca759e21da3495a" name="gcc-go" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="8c8c93feb6e65f357e5f1a99c7fbd95566fdeecd7f7c3c8eafd1cbbbbad9e439" name="gcc-objc++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="77739528749f6d6fab2f5950729b427b1dc622165af8f463309a58f169cb0360" name="gcc-objc++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="df254aa21ac0cd728b56e0514b357351a961376905c5312ab4ed9a4c1a66b117" name="gcc-objc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="2a40708afdb45a206a87f720c7409ea036d62b9b856a7a48a7573cf3cee963d9" name="gcc-objc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="72c1e7aa6108688ee2a7a9821a42dd8d5655d04b8c921bcd0de5499e1eb9cb41" name="gcc-plugin-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="b923f86537f724a3846e6655fa0e8611bfb47df9bdd600d31da8129f7273e2fe" name="gcc-plugin-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="ad03d5ecb62b05545d0b53764e3204cafdcebf211eb8f659e0a618ab57ed2c68" name="gdb" arch="x86_64">
  <version epoch="0" ver="7.6.1" rel="100.el7_4.1"/>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-92.el7" date="1464609600">- Import bare DW_TAG_lexical_block (RH BZ 1325396).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-93.el7" date="1467028800">- Fix 'info type-printers' Python error (Clem Dickey, RH BZ 1350436).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-94.el7" date="1470225600">- [aarch64] Fix ARMv8.1/v8.2 for hw watchpoint and breakpoint
  (Andrew Pinski, RH BZ 1363635).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-95.el7" date="1488801600">- Fix RHEL GDB build with devtoolset-*-build installed (RH BZ 1422193).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-96.el7" date="1488974400">- [testsuite] Fix ppc64 run of dw2-lexical-block-bare.exp (RH BZ 1357079).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-97.el7" date="1489147200">- [testsuite] [ppc*,s390*] Do not FAIL rhbz1261564-aarch64-watchpoint.exp
  (RH BZ 1352563).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-98.el7" date="1489924800">- [ppc*] IBM Power9 and __float128 backport (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-99.el7" date="1492776000">- [ppc*] Fix gdb.arch/powerpc-power7.exp testcase regression (RH BZ 1440044).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7" date="1497355200">- [ppc*] IBM Power9 backport extension (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7_4.1" date="1512993600">- Fix gcore for memory regions with VM_DONTDUMP (RH BZ 1524312, Sergio Lopez).</changelog>
</package>
<package pkgid="db2e478004b0f267a3834b0c0b8e8dff90590045496e01d31a45b96d00398797" name="gdb-doc" arch="noarch">
  <version epoch="0" ver="7.6.1" rel="100.el7_4.1"/>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-92.el7" date="1464609600">- Import bare DW_TAG_lexical_block (RH BZ 1325396).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-93.el7" date="1467028800">- Fix 'info type-printers' Python error (Clem Dickey, RH BZ 1350436).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-94.el7" date="1470225600">- [aarch64] Fix ARMv8.1/v8.2 for hw watchpoint and breakpoint
  (Andrew Pinski, RH BZ 1363635).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-95.el7" date="1488801600">- Fix RHEL GDB build with devtoolset-*-build installed (RH BZ 1422193).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-96.el7" date="1488974400">- [testsuite] Fix ppc64 run of dw2-lexical-block-bare.exp (RH BZ 1357079).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-97.el7" date="1489147200">- [testsuite] [ppc*,s390*] Do not FAIL rhbz1261564-aarch64-watchpoint.exp
  (RH BZ 1352563).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-98.el7" date="1489924800">- [ppc*] IBM Power9 and __float128 backport (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-99.el7" date="1492776000">- [ppc*] Fix gdb.arch/powerpc-power7.exp testcase regression (RH BZ 1440044).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7" date="1497355200">- [ppc*] IBM Power9 backport extension (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7_4.1" date="1512993600">- Fix gcore for memory regions with VM_DONTDUMP (RH BZ 1524312, Sergio Lopez).</changelog>
</package>
<package pkgid="9583d4f77d89198c8427d496fc1cf663f4df35bca4ffd642e2edd2196e4e0a6d" name="gdb-gdbserver" arch="x86_64">
  <version epoch="0" ver="7.6.1" rel="100.el7_4.1"/>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-92.el7" date="1464609600">- Import bare DW_TAG_lexical_block (RH BZ 1325396).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-93.el7" date="1467028800">- Fix 'info type-printers' Python error (Clem Dickey, RH BZ 1350436).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-94.el7" date="1470225600">- [aarch64] Fix ARMv8.1/v8.2 for hw watchpoint and breakpoint
  (Andrew Pinski, RH BZ 1363635).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-95.el7" date="1488801600">- Fix RHEL GDB build with devtoolset-*-build installed (RH BZ 1422193).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-96.el7" date="1488974400">- [testsuite] Fix ppc64 run of dw2-lexical-block-bare.exp (RH BZ 1357079).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-97.el7" date="1489147200">- [testsuite] [ppc*,s390*] Do not FAIL rhbz1261564-aarch64-watchpoint.exp
  (RH BZ 1352563).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-98.el7" date="1489924800">- [ppc*] IBM Power9 and __float128 backport (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-99.el7" date="1492776000">- [ppc*] Fix gdb.arch/powerpc-power7.exp testcase regression (RH BZ 1440044).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7" date="1497355200">- [ppc*] IBM Power9 backport extension (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7_4.1" date="1512993600">- Fix gcore for memory regions with VM_DONTDUMP (RH BZ 1524312, Sergio Lopez).</changelog>
</package>
<package pkgid="36306550e5c3b4f8e9d33ffc8f6d46cdc8387f60d8a6885c63334a325335344f" name="gdm" arch="i686">
  <version epoch="1" ver="3.22.3" rel="13.el7_4"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-13" date="1512388800">- fix reauth crash
  Resolves: #1519250</changelog>
</package>
<package pkgid="31b75f1215ccc9d13afaae5d31860b9544e74642d4a78ce3d9eb3df263b80eab" name="gdm" arch="x86_64">
  <version epoch="1" ver="3.22.3" rel="13.el7_4"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-13" date="1512388800">- fix reauth crash
  Resolves: #1519250</changelog>
</package>
<package pkgid="269fc51c5824a915b8387c62a80892349b6db0653e6d677a88c740936846d5c1" name="gdm-devel" arch="i686">
  <version epoch="1" ver="3.22.3" rel="13.el7_4"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-13" date="1512388800">- fix reauth crash
  Resolves: #1519250</changelog>
</package>
<package pkgid="fc90e45d8af062500629d162d53a3fd88b3c7ea245ed7fba74d4689bac3f7476" name="gdm-devel" arch="x86_64">
  <version epoch="1" ver="3.22.3" rel="13.el7_4"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-13" date="1512388800">- fix reauth crash
  Resolves: #1519250</changelog>
</package>
<package pkgid="c0887034031dec36c354a6cd7f705f8387bb21526b826117fe1dbe966737a40d" name="ghostscript" arch="i686">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="df55d7e94c588804b6aa4f69b24bb83b9c78abbbe767a76d6fb4fb6e977fcf60" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="2fa96770bc6f55471a0e07e779e28acb32b69dcda85ae7578f5aa28ccba62bfb" name="ghostscript-cups" arch="x86_64">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="4e5c2b566950ef1e962384010360cbd61daaec13dc80cbb8ca8335ceef1e7805" name="ghostscript-devel" arch="i686">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="ade8e89212a386eb8ca1ac989863cb09638834a49f2646b7bc3c715bc466034e" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="ac255402d35acbf089582a7d7e76449f0180b71a3635cd23f8c3e946903e5b77" name="ghostscript-doc" arch="noarch">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="7c8000742fef036a35bdabec2e70cebac75bc8552024be54469a9e6206cd9508" name="ghostscript-gtk" arch="x86_64">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="508a5e452831276d947ec2eb9373e4b8b1f36189b7d3ad616a098b7b6c74818b" name="git" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="b2eec4bccd82673ab361c800275fe92776ae31df02afa9f6ce8cbe1096c849a0" name="git-all" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="ebd4e067b89f6d38b3458ffd8252445341c0e802e670a8a0673ab8c5e98bd206" name="git-bzr" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="117bbca16022a21c0418b8b4fe40a4b78c49450de601ce02126e4fb706c66875" name="git-cvs" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="09c05897b4524714561721db362c6005c86329922b5ec85a536b71587a0c3961" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="c133db7789710509af9898627f893977923e5a5b14b10324c6388cf3372a44f1" name="git-email" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="1db18bca4255b60fa1bacf13fda4a888e8c502fa215d47ece7fe019a39bf3993" name="git-gui" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="91ade2cf3d9b47b2af1e40e89f051111f4b2cd7e52a8f6c539f0e652262a7beb" name="git-hg" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="f06c13fd6ed74213a6144491101d74008269b3b16e70b67b37dee7891d7b1de3" name="git-p4" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="f4d18bf990ad8f98a3e9b2a0e05b24e95120bdfcefef61ec99e864a1d4c63879" name="git-svn" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="0c75501cd64133617bc6b1bb57b82dc8d6f53c6ed8801dd21851c173242e395a" name="gitk" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="e46e26535179da7900cfe88acdb474fa2db5fc055d8bc84a820438de9a759e8b" name="gitweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="2868b2acb32335c9949ba8360d4239468ab8c2db9e7b96c749054bab479695e9" name="glibc" arch="i686">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="defaf1a3aec68fa12e5129426b04f8f544ad79cb237cc60385e4daf393a8e758" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="b3457ced43a489dcc1f3e018ad5d543973fd9de38fa159d418095c2f9091793c" name="glibc-common" arch="x86_64">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="999cf17dc4dc9aa9da4cc108a18437305dae5bee3121c218a96417df6067d2f2" name="glibc-devel" arch="i686">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="8397663b68d2f4ff46dbb3977b29e853ad98bddf29487822bbfd0b650187b797" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="7eaf359c42467c784634b726951699842a96aeb7c6e2d926d7784166bdf11934" name="glibc-headers" arch="x86_64">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="54eb17d2e296b912c06b739a4091f4c054eb73f4cda34a1f68a486cb1900218c" name="glibc-static" arch="i686">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="51be01435c3c576dc760e25ac8351dcb57d04212a782b9173f7dd179cbca865f" name="glibc-static" arch="x86_64">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="66c3130bbf6014ceb077a80db5fbf4b0133e6996b76f287366b907142541c0c4" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="eab3ba96302e38f9ce2bbe343bc0caaa5c7ccf0edf485acf7b1da80b5bbad7c0" name="gomtree" arch="x86_64">
  <version epoch="0" ver="0.4.0" rel="1.1.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 0-0.1.git8c6b32c" date="1475150400">- First package for Fedora</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 0-0.2.git8c6b32c" date="1475496000">- Resolves: #1380420 - import into Fedora
- fix binary build step</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0-0.3.git8c6b32c" date="1476964800">- add debuginfo package (rpmdiff complains about unstripped binary)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com - 0.3.0-1" date="1481716800">- Resolves: #1404402 - rebase to v0.3.0
- built commit 58660bb</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.3.1-1" date="1485172800">- Resolves: #1415321 - rebase to v0.3.1</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.3.1-2" date="1490097600">- golang arches: https://bugzilla.redhat.com/show_bug.cgi?id=1418480</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.3.1-2.1" date="1491220800">- build for all available arches on 7.4</changelog>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 0.4.0-1.1" date="1499860800">- rebase to 0.4.0</changelog>
</package>
<package pkgid="b6e83aa2598269835abc0871b8770597f17a4c2afeec80a0aa695fa252dc592c" name="gomtree" arch="x86_64">
  <version epoch="0" ver="0.4.2" rel="2.1.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 0-0.1.git8c6b32c" date="1475150400">- First package for Fedora</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 0-0.2.git8c6b32c" date="1475496000">- Resolves: #1380420 - import into Fedora
- fix binary build step</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0-0.3.git8c6b32c" date="1476964800">- add debuginfo package (rpmdiff complains about unstripped binary)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com - 0.3.0-1" date="1481716800">- Resolves: #1404402 - rebase to v0.3.0
- built commit 58660bb</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.3.1-1" date="1485172800">- Resolves: #1415321 - rebase to v0.3.1</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.3.1-2" date="1490097600">- golang arches: https://bugzilla.redhat.com/show_bug.cgi?id=1418480</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.3.1-2.1" date="1491220800">- build for all available arches on 7.4</changelog>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 0.4.0-1.1" date="1499860800">- rebase to 0.4.0</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.4.2-2.1" date="1512993600">- rebase to 0.4.2 - de69569d25a8611cfac834ac4801194bc352b448</changelog>
</package>
<package pkgid="3673898455b2460ff4ad793bb49b4b69ca879678359ea231645730e19b7271e5" name="gomtree" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="0.2.git16da0f8.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 0-0.1.git8c6b32c" date="1475150400">- First package for Fedora</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 0-0.2.git8c6b32c" date="1475496000">- Resolves: #1380420 - import into Fedora
- fix binary build step</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0-0.3.git8c6b32c" date="1476964800">- add debuginfo package (rpmdiff complains about unstripped binary)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com - 0.3.0-1" date="1481716800">- Resolves: #1404402 - rebase to v0.3.0
- built commit 58660bb</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.3.1-1" date="1485172800">- Resolves: #1415321 - rebase to v0.3.1</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.3.1-2" date="1490097600">- golang arches: https://bugzilla.redhat.com/show_bug.cgi?id=1418480</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.3.1-2.1" date="1491220800">- build for all available arches on 7.4</changelog>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 0.4.0-1.1" date="1499860800">- rebase to 0.4.0</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.4.2-2.1" date="1512993600">- rebase to 0.4.2 - de69569d25a8611cfac834ac4801194bc352b448</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.5.0-0.2.git16da0f8" date="1517486400">- rebase to 16da0f86ee549d8949775bf3d555e7921a9caca9</changelog>
</package>
<package pkgid="62299b596c05c7ba747ffed56aa9fc853d64c6a2eebec9d00ef1a8856fdc8e0f" name="groovy" arch="noarch">
  <version epoch="0" ver="1.8.9" rel="8.el7_4"/>
  <changelog author="Andy Grimm &lt;agrimm@gmail.com&gt; - 1.8.8-3" date="1365422400">- Apply patch for GROOVY-6085 (RHBZ #949352)</changelog>
  <changelog author="Matt Spaulding &lt;mspaulding06@gmail.com&gt; - 1.8.8-4" date="1365681600">- Now accepts classpath argument (RHBZ #810885)</changelog>
  <changelog author="gil cattaneo &lt;puntogil@libero.it&gt; - 1.8.9-1" date="1366459200">- Update to 1.8.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-2" date="1370520000">- Remove bundled JARs and classes
- Add workaround for rhbz#971483
- Add Public Domain to licenses
- Install ASL 2.0 license text, resolves: rhbz#858257</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 1.8.9-3" date="1370865600">- Fix license tag (+CC-BY)</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-4" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-5" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.9-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-7" date="1389614400">- Add Requires on java-devel
- Resolves: rhbz#1052291</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-8" date="1499774400">- Fix Information disclosure vulnerability
- Resolves: CVE-2016-6814</changelog>
</package>
<package pkgid="bbf40517b7ff7bed14d6aff6f148e0c1220be11dbc579ff7b76241d290d43baa" name="groovy-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.9" rel="8.el7_4"/>
  <changelog author="Andy Grimm &lt;agrimm@gmail.com&gt; - 1.8.8-3" date="1365422400">- Apply patch for GROOVY-6085 (RHBZ #949352)</changelog>
  <changelog author="Matt Spaulding &lt;mspaulding06@gmail.com&gt; - 1.8.8-4" date="1365681600">- Now accepts classpath argument (RHBZ #810885)</changelog>
  <changelog author="gil cattaneo &lt;puntogil@libero.it&gt; - 1.8.9-1" date="1366459200">- Update to 1.8.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-2" date="1370520000">- Remove bundled JARs and classes
- Add workaround for rhbz#971483
- Add Public Domain to licenses
- Install ASL 2.0 license text, resolves: rhbz#858257</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 1.8.9-3" date="1370865600">- Fix license tag (+CC-BY)</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-4" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-5" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.9-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-7" date="1389614400">- Add Requires on java-devel
- Resolves: rhbz#1052291</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-8" date="1499774400">- Fix Information disclosure vulnerability
- Resolves: CVE-2016-6814</changelog>
</package>
<package pkgid="e8255ecb915c209d31a03dcd97ce5d8b7bddb88706aa9d01053b9e80ff015d5a" name="grub2" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="a4854b487b14f1c1af5887a254e3f7ae8b099e55c037f3cb4fa84618cbae380e" name="grub2" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="f3eb660452ebe0441488ee879828dbc63af1821d028ec2ef3d3d023a47c37f98" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="303b91913cc7209f2467966d235b3181f0b37da32ed2cd42addb49f981cab966" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="62437f9f7c6780b51a7368c900015aa21d8a6481f2920d778341c2aae66e20d2" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="37982933a38dbc415b169b667703ac6e5e9e0e953d55705535484bffae0fef8d" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="0f87f95cb2662238ac6d49dc72b344e6fb78b4a5bc5ace7b74730199c0719211" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="fe3c2c6ef3b43ff6e4f688b1525d00ec0a747db41e3ce71d5098c0261656d988" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="cd2ad3da0e4b6d16aee87304c7b58b663914baf9a716386e43bbc765018e7305" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="2dc7def20ec7f7cb8be9a02e09a661b779eb2bea9740e928956b171d02226354" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="90ead4a17c3249757a68c526e1ee1cd1670f950b3751fe52b30c33d0697bec19" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="45c5b9c5322da902b1bd60d6a8a6a6c76b0002a6995c7ae4ce93bc3b81ac6fa7" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="9603f6ce5a177f1a7a7879015d24c0102477d27ffdeadcc7548dafdee13de554" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="9bb6b204bba3a91eb4a141f7234f5c033d413ed8180aaa02505b746a572e5dec" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="c044cd3416939251301fb8a706c6eb8b4f92d8249e715c0ba4380a7bd3811a9d" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="fe563fa92166a578b2bf9a7a6c734bb6a59a5a979f13a6909f7a1b92f8e8884b" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="ded57d72ae99165771e38b9cde49bd031fb764af6362f6e3cc773a5e9d481b5f" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="2472933599800f7e691caa975bffee2426f23c4b1aba6bdbd3d63bb216e3e851" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="6b0f67a6826148b02a2f9be63570879379a640883233ba11c71a363be6403f80" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="78f03ded6488ff7957d24f34d666f44319dbf3e97c0873873c2f878f63c847b6" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="f2eb7327a4c0d43e3db066c7677c19751fc1a71d71a969eb159351900199f689" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="4914c041ab814dae0a2ed2ffbef5bd462896189bb5f0e57413083aa645243717" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="64a6fa2cfdd10010f7c813a89fb11b5e7cd3a97ba85c6371d16ca5341e8692e1" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="70757f33cf10d90289638b7f319716d9d0be70c2bead20dd2abd09c30e976aa2" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="cb04607e930d608fe38d03d0121ba5c52cc899a83de2ae72af62e5d0f2068e95" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="3f386e59543d00aececefbac3ae65e60e763a66551aa669447f2555814222615" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="ddb9d0862e83312adb57946d167e40de628049e66cc2a3c30abd74fdcbdd9f92" name="gtk-update-icon-cache" arch="x86_64">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="e9d82b7ed36e5d5546a60a33d0ba8c16f631d0cb7b8c5051c26d07145da6873d" name="gtk3" arch="i686">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="cb9cd77132d90bf26e8906dc5f02665f539447a7e566ea1ae32da59acfeca568" name="gtk3" arch="x86_64">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="4e48e79e4c5052a7cc73c7ff29eca4c0be8d242d47979ac0176dce5aae583bfc" name="gtk3-devel" arch="i686">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="bd45fe857ab2379211b31b15f7f21aa74f0bee27cf8c256b0780ce89fc8880e3" name="gtk3-devel" arch="x86_64">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="cf02ae1782b332904c57c8ea3c386d46f3a3357041dc7b261e481585501136a0" name="gtk3-devel-docs" arch="x86_64">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="d6b4b96bafa3b336598908164ab9972395db8e6737964a7430a4a92bfb6cdfe0" name="gtk3-immodule-xim" arch="x86_64">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="4e649395ef95f32c5ee7318fc278f9a862ce254e0485863e5330a9302a7dab47" name="gtk3-immodules" arch="x86_64">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="597b130f18435ab0ad84d067eb6eb93b14591eb3d3df94b30b132dc21f53ac86" name="gtk3-tests" arch="x86_64">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="d1b381c5523e3a62dff9919b8fa33d59cbe25e555a7db14b616074041972cd0a" name="http-parser" arch="i686">
  <version epoch="0" ver="2.7.1" rel="5.el7_4"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-1" date="1485950400">- Import spec file and patches from latest fc25 package
  Resolves: rhbz#1393819</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-5" date="1502366400">- Bump http-parser release number to avoid people pulling EPEL package instead
  of RHEL package
  Resolves: rhbz#1480321</changelog>
</package>
<package pkgid="81aaf60317208ca6a7b4b8e9871524f02f13f58c9998af50d3656279b2015251" name="http-parser" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="5.el7_4"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-1" date="1485950400">- Import spec file and patches from latest fc25 package
  Resolves: rhbz#1393819</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-5" date="1502366400">- Bump http-parser release number to avoid people pulling EPEL package instead
  of RHEL package
  Resolves: rhbz#1480321</changelog>
</package>
<package pkgid="4998e5cc58856e298f02f379997e81dea586f0afdb8771782504d270a0651abc" name="http-parser-devel" arch="i686">
  <version epoch="0" ver="2.7.1" rel="5.el7_4"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-1" date="1485950400">- Import spec file and patches from latest fc25 package
  Resolves: rhbz#1393819</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-5" date="1502366400">- Bump http-parser release number to avoid people pulling EPEL package instead
  of RHEL package
  Resolves: rhbz#1480321</changelog>
</package>
<package pkgid="b401c0237d3add5f00329912f8fdd5b11a802418212cba83fa31a297afd515b8" name="http-parser-devel" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="5.el7_4"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-1" date="1485950400">- Import spec file and patches from latest fc25 package
  Resolves: rhbz#1393819</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-5" date="1502366400">- Bump http-parser release number to avoid people pulling EPEL package instead
  of RHEL package
  Resolves: rhbz#1480321</changelog>
</package>
<package pkgid="1c288481f32d852831b4a2f8c0cd453a32e4d48b1a08a95d4231ec0a03713aad" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-59" date="1489406400">- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines
  are broken during buffer resize</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
</package>
<package pkgid="8f563883c3fc725d3eba289e24ecb792ed59319f626c7a14c37f5f36b805a4ae" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
</package>
<package pkgid="61ee899a8740a0c144b4fec02f9ed096025281b3eec5b8fc7b9627151a3b5a0c" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
</package>
<package pkgid="fd59cbce44d10803e7222b8a226be147ed16114bc6e4933a2fc6a08f4992b554" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-59" date="1489406400">- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines
  are broken during buffer resize</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
</package>
<package pkgid="f6ab986949068756127fcf88ee397eb2845784df6206bf80aa644b87ef8aa315" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
</package>
<package pkgid="ea1f78a6a23ca4488301c597d85ac18365aeb7e8b8055c6973a45d233f942b8c" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
</package>
<package pkgid="f83276771f6e8f44aef8961b0073b4a477ffbfdf4028b604e6ca3cd605ab9e68" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-59" date="1489406400">- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines
  are broken during buffer resize</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
</package>
<package pkgid="dfd828429932a41324addaefd1da26efa8dafb0e5080280d03ba6d4039e7c166" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
</package>
<package pkgid="ca6eca019ea9d3f19193fe3f5b62f1747ff33c47591725c134eee065e23e7d73" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
</package>
<package pkgid="acf07ade21cbbc93f7ba0653cba79e9d8f93ca2f9464983d6a7389dcedd39b54" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-59" date="1489406400">- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines
  are broken during buffer resize</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
</package>
<package pkgid="22aca80d9db090975e28afd49da7b3846f8814d6afb39f8838f2445318cc9f89" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
</package>
<package pkgid="9f6e2860a1255d32b85dbdece3dacfcd08b1966888b6f2f553c6fc120c65ca74" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
</package>
<package pkgid="092cf57988a9cfac3070ddf4a732131ced36b431f6ff3c92ec3bcfb407787997" name="initscripts" arch="x86_64">
  <version epoch="0" ver="9.49.39" rel="1.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.31-1" date="1465819200">- ipv6: wait for all global IPv6 addresses to leave the "tentative" state
- source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
- ifup-aliases: inherit ARPCHECK from parent device
- rhel-dmesg: don't start in containers
- ifup-eth: fix typo in error message (#1038776)
- sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
- rwtab: /var/lib/nfs needs to copy the files
- functions: improve killing loops
- ipcalc: detect invalid mask
- ifup: set valid_lft and preferred_lft to forever for static ip
- service: use systemd mangle for given service
- ifup-post: check resolve.conf also with DNS2
- ifdown-post: remove resolv.conf only in specific cases
- spec: ghost /var/log/dmesg
- network-functions: is_available_wait should wait even in the case that is_available returns 2
- autorelabel: turn quota off before relabeling
- autorelabel: call dracut-initramfs-restore before forced reboot</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.32-1" date="1466683200">- ifup-eth: fix setting preferred_lft and valid_lft</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1.el7_4.1" date="1509710400">- ARUPDATE option introduced</changelog>
</package>
<package pkgid="a73049c9dd4149ae4025dadd69b9b18ca6c1d2badae3982b889623a7e67b2b01" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
</package>
<package pkgid="da91dae98b9a224da6368857871ad4668171b8eff97f30ad3548639a3338d326" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
</package>
<package pkgid="c6d6d187d10f0bcbe97b49b152861994b07ab09698ddb0e95ce8a8f0278b5f88" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="22.el7_4"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
</package>
<package pkgid="ba452c40fc0a1485040fe828cb15551dce2fb10b8a1f7ac10a5548a0c7a7cc69" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
</package>
<package pkgid="0e4c490f6a4ae235f01bea620a9e93719fa863ce07a12c794c1263d4b11c2e28" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
</package>
<package pkgid="3a40fd7ff30417e361a2fdb6d16fce165198c8ea9ab402bce920233126d00a92" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7_4"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
</package>
<package pkgid="2c94b083e4f4aa53a2c1ff6fd80c789df4e9390875ee6dfbde22fcdc2925036b" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
</package>
<package pkgid="ed881bb9e2e7a6315f2706e32d197833ae0e7ca97020100e5d94d591d4007bad" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
</package>
<package pkgid="c47743140a27bc095d08d72a3bd6c11c35eb04d5edc40932c3aaacf6d5803777" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7_4"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
</package>
<package pkgid="48c1e1b14c0473fce522471dd57fa97f715075521a3194689122f88b7eb38538" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
</package>
<package pkgid="c6d925b84dc02724b84bb006b79e4cc700895c49c52520134ec5eeaa3aec9571" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
</package>
<package pkgid="e07549d518535cf3f24507eab0cc5613866c4fcf5849d5ad1c7513fda72cdb15" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7_4"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
</package>
<package pkgid="e106c910e2711874d26edf6f861f378cd57bd27db46e86c1f8bd5ff25f44aa35" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
</package>
<package pkgid="fb62c194d885f6149712eaa83457345aa6436df9e0f95dfa05571b6bf53f1284" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
</package>
<package pkgid="ef5c2aaea029ee92902f0cba1f2c554ece3c81a7eea15d3c3b41055961ca98c8" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="22.el7_4"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
</package>
<package pkgid="5c421aa4713cef9a30ec0644b5efb17d6350f215f529deb7f2830bc825c87883" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
</package>
<package pkgid="9cfd53442edcaa0abfa3a0fa17704f53ca328c1411e9c76f17aba7aa778b3ae7" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
</package>
<package pkgid="d346671eb46fadb1ffd022bb9db3373848bfb955bf0cb91e3dacc4ae02398aa3" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7_4"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
</package>
<package pkgid="75a9a86651e706f5b9447ea9f763a3daaa72b2fae169c3cb50c526abe0e8fd58" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
</package>
<package pkgid="285ecef489394008e8ed3260f17911329eca01e03cbe22efd88ff6a0f5c83517" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
</package>
<package pkgid="268f79aa28983a20c069254b4ae080b9a980b4f2db13662ce0e6724d13f8e945" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7_4"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
</package>
<package pkgid="3ca7a8a21fa0d93c55ce95524a7ca3a72246608e6975c6b3194262a808f4e114" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
</package>
<package pkgid="db3d7ea426b29cc87f09b0ec1f297428c518c804feb0797a885e8678c2210146" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
</package>
<package pkgid="8d1ad84dc960d705c345c98dc4f2a5f4624e8d0e9dfc7de0a87948b64f0e5c51" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="22.el7_4"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
</package>
<package pkgid="b34b2bd310e03e1a522a3433d2175749cd4c32c4476e34baa4e6a6d9aef49086" name="iptables" arch="i686">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="96489af9a4e08c10f05903c0aadf5fe048265afaf2ed21a2e148050f319187a6" name="iptables" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="f259dfc95cd7d4c92102f0df1cc984a2a432e7e7e29130ee7ef0c65cda1e1d79" name="iptables" arch="i686">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="c4d2da653ed41c93f5b9d608921af3aabf4b55a930b72aa271148b7836e42a8e" name="iptables" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="a46a0aa5c2372083e106cded1b0ba30b7048dea414ac0e1c36ba6c8fcc3c9b94" name="iptables-devel" arch="i686">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="991d426023f55e7ed1a305bbb2279f7a8c8c103d005efd5b1de24cff7bc8e168" name="iptables-devel" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="014ae035abece482087aa388713ddf2039d5fc500ff966344d9659d995734f9e" name="iptables-devel" arch="i686">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="c8802ad2e2b4385d3bb5bd03f29995e0e2f89746d4122c8ae97ba9714faa414b" name="iptables-devel" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="e4e00f04dee197f3d890d279be777174f84674931f00115d0c7104dd79a13333" name="iptables-services" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="101a6ba81da46f0d03b3c3ee06338999f37e4bc59a48c19e329061939202708e" name="iptables-services" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="092fae590335957441ed8af0ce455565140bb50bd9733e44676739aac122d5a0" name="iptables-utils" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="8940a8df55641ceb40c90a858a17006d06bc1a03ef4b022739ffa639fd985ac9" name="iptables-utils" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="377b54dab10e2329fcc1fe39d9eacbb89a8877a80e3118e93f43360023353575" name="ipxe-bootimgs" arch="noarch">
  <version epoch="0" ver="20170123" rel="1.git4e85b27.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-4.gitc4bce43" date="1392120000">- ipxe-Use-next-server-from-filename-s-settings-block.patch [bz#1062644]
- Resolves: bz#1062644
  (pxe boot fails if next-server details come from a different dhcp server)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-5.gitc4bce43.el7" date="1394020800">- ipxe-Enable-infrastructure-to-specify-an-autoboot-device-.patch [bz#1031518]
- ipxe-Allow-prefix-to-specify-a-PCI-autoboot-device-locati.patch [bz#1031518]
- ipxe-Store-boot-bus-dev.fn-address-as-autoboot-device-loc.patch [bz#1031518]
- ipxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00..patch [bz#1031518]
- ipxe-Revert-Remove-2-second-startup-wait.patch [bz#857123]
- ipxe-Allow-ROM-banner-timeout-to-be-configured-independen.patch [bz#857123]
- ipxe-Customize-ROM-banner-timeout.patch [bz#857123]
- Resolves: bz#1031518
  (iPXE does not honor specified boot device)
- Resolves: bz#857123
  (Guests never get an iPXE prompt)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-6.gitc4bce43.el7" date="1410782400">- ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
- ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
- ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
- Resolves: bz#1084561
  (RFE: ship UEFI drivers for ipxe in RHEL-7.y)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-1.git6366fa7a.el7" date="1457524800">- Rebase to 6366fa7a
- Resolves: bz#1297853</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-2.git6366fa7a.el7" date="1468324800">- ipxe-Enable-IPv6-protocol-in-non-QEMU-builds.patch [bz#1350167]
- Resolves: bz#1350167
  (ipxe: enable IPV6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-3.git6366fa7a.el7" date="1468584000">- ipxe-Add-pci_find_next_capability.patch [bz#1242850]
- ipxe-Add-virtio-1.0-constants-and-data-structures.patch [bz#1242850]
- ipxe-Add-virtio-1.0-PCI-support.patch [bz#1242850]
- ipxe-Add-virtio-net-1.0-support.patch [bz#1242850]
- ipxe-Renumber-virtio_pci_region-flags.patch [bz#1242850]
- ipxe-Fix-virtio-pci-logging.patch [bz#1242850]
- Resolves: bz#1242850
  (Ipxe can not recognize "network device" when enable virtio-1 of virtio-net-pci)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-4.git6366fa7a.el7" date="1470139200">- ipxe-Send-TCP-keepalives-on-idle-established-connections.patch [bz#1322056]
- ipxe-enable-e1000e-rom.patch [bz#1361534]
- Resolves: bz#1322056
  (ipxe freeze during HTTP download with last RPM)
- Resolves: bz#1361534
  (RFE: Integrate e1000e implementation in downstream QEMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-5.git6366fa7a.el7" date="1472731200">- ipxe-Strip-802.1Q-VLAN-0-priority-tags.patch [bz#1316329]
- Resolves: bz#1316329
  ([RFE] Properly Handle 8021.Q VID 0 Frames, as new vlan model in linux kernel does.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7" date="1489147200">- Rebase to commit 4e85b27 [bz#1413781]
- Resolves: bz#1413781
  (Rebase ipxe for RHEL-7.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7_4.1" date="1502971200">- ipxe-Support-VIRTIO_NET_F_IOMMU_PLATFORM.patch [bz#1481180]
- Resolves: bz#1481180
  (iommu platform support for ipxe [rhel-7.4.z])</changelog>
</package>
<package pkgid="0141a5e94c827986838c07d5e1c2e3525d046a6f7f2fed8869af64270a6152b0" name="ipxe-roms" arch="noarch">
  <version epoch="0" ver="20170123" rel="1.git4e85b27.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-4.gitc4bce43" date="1392120000">- ipxe-Use-next-server-from-filename-s-settings-block.patch [bz#1062644]
- Resolves: bz#1062644
  (pxe boot fails if next-server details come from a different dhcp server)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-5.gitc4bce43.el7" date="1394020800">- ipxe-Enable-infrastructure-to-specify-an-autoboot-device-.patch [bz#1031518]
- ipxe-Allow-prefix-to-specify-a-PCI-autoboot-device-locati.patch [bz#1031518]
- ipxe-Store-boot-bus-dev.fn-address-as-autoboot-device-loc.patch [bz#1031518]
- ipxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00..patch [bz#1031518]
- ipxe-Revert-Remove-2-second-startup-wait.patch [bz#857123]
- ipxe-Allow-ROM-banner-timeout-to-be-configured-independen.patch [bz#857123]
- ipxe-Customize-ROM-banner-timeout.patch [bz#857123]
- Resolves: bz#1031518
  (iPXE does not honor specified boot device)
- Resolves: bz#857123
  (Guests never get an iPXE prompt)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-6.gitc4bce43.el7" date="1410782400">- ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
- ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
- ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
- Resolves: bz#1084561
  (RFE: ship UEFI drivers for ipxe in RHEL-7.y)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-1.git6366fa7a.el7" date="1457524800">- Rebase to 6366fa7a
- Resolves: bz#1297853</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-2.git6366fa7a.el7" date="1468324800">- ipxe-Enable-IPv6-protocol-in-non-QEMU-builds.patch [bz#1350167]
- Resolves: bz#1350167
  (ipxe: enable IPV6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-3.git6366fa7a.el7" date="1468584000">- ipxe-Add-pci_find_next_capability.patch [bz#1242850]
- ipxe-Add-virtio-1.0-constants-and-data-structures.patch [bz#1242850]
- ipxe-Add-virtio-1.0-PCI-support.patch [bz#1242850]
- ipxe-Add-virtio-net-1.0-support.patch [bz#1242850]
- ipxe-Renumber-virtio_pci_region-flags.patch [bz#1242850]
- ipxe-Fix-virtio-pci-logging.patch [bz#1242850]
- Resolves: bz#1242850
  (Ipxe can not recognize "network device" when enable virtio-1 of virtio-net-pci)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-4.git6366fa7a.el7" date="1470139200">- ipxe-Send-TCP-keepalives-on-idle-established-connections.patch [bz#1322056]
- ipxe-enable-e1000e-rom.patch [bz#1361534]
- Resolves: bz#1322056
  (ipxe freeze during HTTP download with last RPM)
- Resolves: bz#1361534
  (RFE: Integrate e1000e implementation in downstream QEMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-5.git6366fa7a.el7" date="1472731200">- ipxe-Strip-802.1Q-VLAN-0-priority-tags.patch [bz#1316329]
- Resolves: bz#1316329
  ([RFE] Properly Handle 8021.Q VID 0 Frames, as new vlan model in linux kernel does.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7" date="1489147200">- Rebase to commit 4e85b27 [bz#1413781]
- Resolves: bz#1413781
  (Rebase ipxe for RHEL-7.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7_4.1" date="1502971200">- ipxe-Support-VIRTIO_NET_F_IOMMU_PLATFORM.patch [bz#1481180]
- Resolves: bz#1481180
  (iommu platform support for ipxe [rhel-7.4.z])</changelog>
</package>
<package pkgid="fc7cb49550f00feabdc0b782aae075842a6b6a74933e4f9822cb9d8547309922" name="ipxe-roms-qemu" arch="noarch">
  <version epoch="0" ver="20170123" rel="1.git4e85b27.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-4.gitc4bce43" date="1392120000">- ipxe-Use-next-server-from-filename-s-settings-block.patch [bz#1062644]
- Resolves: bz#1062644
  (pxe boot fails if next-server details come from a different dhcp server)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-5.gitc4bce43.el7" date="1394020800">- ipxe-Enable-infrastructure-to-specify-an-autoboot-device-.patch [bz#1031518]
- ipxe-Allow-prefix-to-specify-a-PCI-autoboot-device-locati.patch [bz#1031518]
- ipxe-Store-boot-bus-dev.fn-address-as-autoboot-device-loc.patch [bz#1031518]
- ipxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00..patch [bz#1031518]
- ipxe-Revert-Remove-2-second-startup-wait.patch [bz#857123]
- ipxe-Allow-ROM-banner-timeout-to-be-configured-independen.patch [bz#857123]
- ipxe-Customize-ROM-banner-timeout.patch [bz#857123]
- Resolves: bz#1031518
  (iPXE does not honor specified boot device)
- Resolves: bz#857123
  (Guests never get an iPXE prompt)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-6.gitc4bce43.el7" date="1410782400">- ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
- ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
- ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
- Resolves: bz#1084561
  (RFE: ship UEFI drivers for ipxe in RHEL-7.y)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-1.git6366fa7a.el7" date="1457524800">- Rebase to 6366fa7a
- Resolves: bz#1297853</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-2.git6366fa7a.el7" date="1468324800">- ipxe-Enable-IPv6-protocol-in-non-QEMU-builds.patch [bz#1350167]
- Resolves: bz#1350167
  (ipxe: enable IPV6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-3.git6366fa7a.el7" date="1468584000">- ipxe-Add-pci_find_next_capability.patch [bz#1242850]
- ipxe-Add-virtio-1.0-constants-and-data-structures.patch [bz#1242850]
- ipxe-Add-virtio-1.0-PCI-support.patch [bz#1242850]
- ipxe-Add-virtio-net-1.0-support.patch [bz#1242850]
- ipxe-Renumber-virtio_pci_region-flags.patch [bz#1242850]
- ipxe-Fix-virtio-pci-logging.patch [bz#1242850]
- Resolves: bz#1242850
  (Ipxe can not recognize "network device" when enable virtio-1 of virtio-net-pci)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-4.git6366fa7a.el7" date="1470139200">- ipxe-Send-TCP-keepalives-on-idle-established-connections.patch [bz#1322056]
- ipxe-enable-e1000e-rom.patch [bz#1361534]
- Resolves: bz#1322056
  (ipxe freeze during HTTP download with last RPM)
- Resolves: bz#1361534
  (RFE: Integrate e1000e implementation in downstream QEMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-5.git6366fa7a.el7" date="1472731200">- ipxe-Strip-802.1Q-VLAN-0-priority-tags.patch [bz#1316329]
- Resolves: bz#1316329
  ([RFE] Properly Handle 8021.Q VID 0 Frames, as new vlan model in linux kernel does.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7" date="1489147200">- Rebase to commit 4e85b27 [bz#1413781]
- Resolves: bz#1413781
  (Rebase ipxe for RHEL-7.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7_4.1" date="1502971200">- ipxe-Support-VIRTIO_NET_F_IOMMU_PLATFORM.patch [bz#1481180]
- Resolves: bz#1481180
  (iommu platform support for ipxe [rhel-7.4.z])</changelog>
</package>
<package pkgid="039516221cfd35801850253c1642a2951d603813f861ee8e16a46a0d1114978f" name="iwl100-firmware" arch="noarch">
  <version epoch="0" ver="39.31.5.1" rel="57.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="8270299be6580365636766f4c052659ecd0645fcedd270a9fe3a1dd91ca37de4" name="iwl100-firmware" arch="noarch">
  <version epoch="0" ver="39.31.5.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="f9df259b05229f1062d575864f0f3f1b7b3b3b54eda5c2baabc96b2b25693800" name="iwl1000-firmware" arch="noarch">
  <version epoch="1" ver="39.31.5.1" rel="57.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="ca2b1c3620a23d711ef231dc6806c4c03862bc54178881b9d27d19c20e2b5a28" name="iwl1000-firmware" arch="noarch">
  <version epoch="1" ver="39.31.5.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="1dc8a3e28227e8fc407c9234ebb1eaf522c1d4ba6e566c114bc3c7d1b49f763a" name="iwl105-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="57.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="7063bf84a34b479c0619c114941af581434641f967302b3b1a8ff5e0a51195e8" name="iwl105-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="26fc46a5804064491c74777b8ade3f22a51f94247c80db40e83d2329c5e5493d" name="iwl135-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="57.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="22647871ab83ee801a7d2441cdfffcd0c85f6f3b830134d65d9a6ccf6fa10f50" name="iwl135-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="11b06081dbccad507baa02363a7a4918a5bb255a3e8aec062d7a3628742e80fd" name="iwl2000-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="57.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="bff9cb97a1f41fb04340b7c73a556df547c9a9881d64ed968bc95f7e6d09f221" name="iwl2000-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="7183c62fad056a03041d332e141f36c845abca8eccf15fddd59ec7c81665db8d" name="iwl2030-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="57.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="7b8c993cf1ed8607f13e32daba79167ad61123ee3f23b044f995af2c9eea16d4" name="iwl2030-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="e3f816b0fcae42d0dcf342c11436cd93a4ba7224f3762a63c022c3cd505bf018" name="iwl3160-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="57.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="4deaf25bee42629b12570552bb52bfe5095b024df3f26ed1e50f328dfc5fb266" name="iwl3160-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="223d30820b214895e5e34071a00156f601726b86f3ce7321f1dadcc1fd9de5b1" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="57.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="553cd4e835ecfb80e922eb83e6b903203c67fa1b036484e0a3f17b715ce6e83e" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="a6c84661070558ee78a9704bcdf147eb79387ad694c290769bd5837073b0bedb" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="57.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="2972c0d62ff02c5bc93a1abfadc5cbe6699b4b202e5e89d531513efcbee56b9e" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="bfca9162aa9ee4d10d40be999b0b62d545f779e0c330331d70e96830d37f1c7d" name="iwl5000-firmware" arch="noarch">
  <version epoch="0" ver="8.83.5.1_1" rel="57.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="ccf9c9b2888253284ae8a5091873c35e2bba391a185a4540c61c1ccf573d56fb" name="iwl5000-firmware" arch="noarch">
  <version epoch="0" ver="8.83.5.1_1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="9996375123965303fcb6d4ff4d59f192aad8f6dee2ec44790f406352a17b0562" name="iwl5150-firmware" arch="noarch">
  <version epoch="0" ver="8.24.2.2" rel="57.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="87ab4b7f9b657d64591a2183b1965e39af2a8c98b70b20f407ae0d4b44adc892" name="iwl5150-firmware" arch="noarch">
  <version epoch="0" ver="8.24.2.2" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="7e5ba67a6c77824c0484d74a797c6f7fb619a545e64baeacf5028217ffd636c0" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="57.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="27c1f078bb00ac1e91a42d36af975114c47ac42284d795327f52c7542acabd3f" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="d67b35cfbae0b4f42ef8df05e22d969a5aad3de2ab54a2d56e33b7983b188c9d" name="iwl6000g2a-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.3" rel="57.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="100e153df4bbf4fe5353de78f2988bc3ec08fc04d5eecfb259e4767cddc6d2c1" name="iwl6000g2a-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.3" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="67809f33f6751e85a8c27d2fa76b55598054a0a72ed349ca6aed3061b5116379" name="iwl6000g2b-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.2" rel="57.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="9d88c27df7526a3e383ee384e2fafd39a0f4a84516fd24686fba02e1aa44e910" name="iwl6000g2b-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.2" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="8fab2d60d57f48727c4b9a7e34bd5bfbd92e6f6d01e7114d8057f1fd342688e8" name="iwl6050-firmware" arch="noarch">
  <version epoch="0" ver="41.28.5.1" rel="57.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="11ff0ddfa57e50828130acaee35d6cc558e14f680ed87be1dfea2be702f8829f" name="iwl6050-firmware" arch="noarch">
  <version epoch="0" ver="41.28.5.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="1f78383c75292bf865112118cc69057b8f4c1666a3d9b3fbee7fa99de9b9100a" name="iwl7260-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="57.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="fce648af076fd181f21801ed655d135b9975761a826e197ddee0ad8152700d54" name="iwl7260-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="525c6d3b80447112ac5998f93401c19d4475bc564a834ae9cc07f552418be544" name="iwl7265-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="57.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="aa5cc050a4842dc935401836ef61ef8e0259251590dc754037f70ae1be6860df" name="iwl7265-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="ad4f0cef2a8b256d69a196d160c622b693f20263269f6a68032d4a38fc3a66b5" name="java-1.7.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="62b874a65949f6a85c7844459b89a7f07ac90b8c0f23ad7ae6259f8c8ed22ac0" name="java-1.7.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="4daf572042c6c5207a204886c9b28f61769d9dcbc953d4da12cc935e59106da9" name="java-1.7.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="1421b2a7d6aad1e554824a36ae18510ec8ca1eaa4b0041f73bdf2def630d027b" name="java-1.7.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="bc0b3bd25e42873bdb43914289326a3d44cf8292cf4079f5f9fdcf973af9b77d" name="java-1.7.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="7366dfedbe33698003ead304029b9c2596ece653402965d171c0bd9becbf8649" name="java-1.7.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="095d9ff16dbb44aa177c7a0a2f068e3bf7e939bd3ee1b8bc7d1d7049746e41e6" name="java-1.7.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="e1195e1b2d4d534d757761986a3a9fb94805848f094377ef0d975234211c0f80" name="java-1.7.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="0b8381228137b763845a599d45aef47aaf5ddb9a2bb9a8d14f2911ab5e964c10" name="java-1.7.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="18891a96bddf09ab89ceed9b6fce55f42e519c7507a08abf363d626802cd887d" name="java-1.7.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="cf290a22aca03f56eb42f3f9ad1eb12cbb51f366b245d0f8b520995e716773c7" name="java-1.7.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="99dd0b4eae613a130fba82997ada1a78bd1f12f2f5573d8815f752399bc873cd" name="java-1.7.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="5db65cf94f16450560b9b89a83fae0084e289493b2c58eb7d613603dce68a03b" name="java-1.7.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="e8b8ee4870f750b9eed47cc6e08f9831bcb704db66ec930de8efbeb7f1c18749" name="java-1.7.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="1160d86f5b0a8bc80c9ddf6b428b64c1742cde9770f7bf6668b8e0bfad68815e" name="java-1.7.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="4ad24424070b8044ead77af1e8a7d0326f77bd662b03ca850171c56276e8dc7f" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="17d2ec332ea4b0bf3e504444886a885b2d92a3b37958a368654ae2d02b251f6b" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="31b70c91e9916a0c06fb4d3bb7830bcafb2cff3916a31c255dd169f1677f77d9" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="19ccbcca6e216b99e48e850a36b6059c64c6ca6e769fd7c5b30017265af9b4c4" name="java-1.7.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="d2711df21468b1141cdd5e27d0362c61f979c1c6e27916d623d43932065b5971" name="java-1.7.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="d04f062f7125a0ccd896ea5d849ba31960fe1b2dc01da9ea9e65de324eef38e9" name="java-1.7.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="653abdbce5968112e5ec0603fe2b2854069674e38c32a6f2184467106012c5c4" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="642cedfb7d4b30e687867d1de29f24f70ff364d734d4db48e0adb1f858b6505b" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="5bf7a43cf4169d610362837ffce41cc9a33e5e5a14a1d0c1c52aa16f378e7de0" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="931abbaeab6c0e9a4bd9ac1c106f58defa19315d736aa175686a46f717c6222a" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="73be766c4ad8a04513e4ff2a4d4e40f9ac460a2dd35697ddad612a059f620e38" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="3ce16412be6fd5004918f4b4da89db7ffed3e6f7c69c433523893f90b364cc89" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="2a458d20cb40b076cfe3b81e3bf9e25c4d806edeff3ea3a1bfa410155abec33a" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="cda6c1dc3022e9001c85713211acd8953dff6600a7bfef7a6dc47669305440ea" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="d2dfacca36a548e6f3c9a25f2dc705f0c6b79034e8a96a28c71b0ea1dae909af" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="270e80d49e63b8fd899d177339c8b5109dc9c578dc9822327dce365a71406329" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="612d7e91de69e15123a39e69a76692db8a2d0e34b1c98e1b436ce66ac36fee39" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="39fe739686814d7f1286eb3b8e96a23716fa9808b724f4f1083a0b48b54942b9" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="8d0fa035cefa500ca02ba858ff1a01c3130fdfaac7e88fb2bdfafdf2f41ed7a0" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="d89c61dbe085be054b4a52bc1eca3ac10d9821b65b230d7eb1b5b5bd55336cfd" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="c5cd38dede4203dc318b129466f1e2cb635845fadcd0d024bfed90f0bcd90853" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="79cf5a47b5236007204dcab79e35ea1b27d62590bd6d377d38d37bef0a90d8bc" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="68e1321f66d1d11a7d446adf2d3a5c4e753e42d53a32644770dff45a53e9786e" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="b6df65808c1c73fe584dc173b1d1e0646b377b112e80664938e614e47eb9c2db" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="8e6694be687055ea912e97d72e2eb6f10fe5f472ef9c31cfda64b0eea5ae9819" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="36e17a7b824e058113220300c5e9d4bba42a5dfb879d94407abc9d9142ac940b" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="fef88ca724b46fecafeb9cc57f1ea7396b1f49b172cd6446f332a90c8d40989a" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="77b78618b692b83affe840ddfc729328c8337104b1e2f66e88dc906b37abd10e" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="e6a9c7a6907c020d1053b5bd5d6c4b77e6f96d03bd92332d4ad7107514f701bf" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="67a11333a34024c29a2d5f9e4788c069369427d7dde2ddc57a1955f3f105f8e8" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="9606840cb65a92877a590c9fc39917bd557816b69bd9562fb9f4bd8b96861f90" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="338e6d054fcd203cfc92d98b42d17623d4844ca08649dc4e1a5aa696eb9d1464" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="52444f408b339e6fef3dc97964e727316b93ab7aca5f0646fdb4a7abb6c0a2bc" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="0319088dc4adb7502ebcb00f36ad419052654447b12138d1f6039d3f9714246a" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="1d85b68ff488e4c7692d240cd7a4c3c8ca27253420ddfaf1364796619796b138" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="f16dde750b68ba7e7e66c0e7004a826d899e0bb64bceccb12d9e58cd5b743008" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="9e08322385cf95100388401f54d8a16c1671233f2a4ca63b5fd3c1164af1f433" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="9917a2434689688927f016f16e1bbbb451f9572d5dec0a9862ee4d9076726a40" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="029fad68e8b7aaf6cd25816c1f62177873f355096822289b58cd579e47fe345e" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="b6d69b5aa6717307fe7d7a37a8ed5833ceca8074efa52e8c77db0f5cee54c59f" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="35db5263395cc124a9f7bfdaf6a0aebb9303ab262b8029c68756507e2292c19d" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="fc09a67552cb2fe943daf3506463bf8552ebbe5fb8090b885b38452ee6c946c3" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="c9e4bd28c920e83c61e0e69c3ce7cc5d7229e5ab7d516ecc2fe428a4c3ace424" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="99001402c56883b236a045ff23d324d3b598cfd2ad75211db08e0ec270adb557" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="21fecf465c3018411474824b7db00d378ee964519c8e26ad32ca3ba49ebc438a" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="c9dd58860dfc519b9c69e0d882bbbd488010816df98f102c9647294530e3669d" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="85d307e7f6702219b3f03326dcfb908e91c788c163349f8d83ad4ee67fc77756" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="b3c6312b58fdc3b59cb6ea69a6b9dca19d235f2cb5952dd884472ca4ff997e82" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="45c50c389e507856a07ed0240452cd2d1f4375038bbfd104cac71cf8591c3b7a" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="aef0825d3044e71e5fd192c14c2901ca3311f0b97d98ec8d37b506f830950a1f" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="19f428bdb4b1eb31b2d5e45eeee7dee45c86c6b3b75e60c805dbe28432c556b1" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="29d7d179013c6d849ce8679dec83e4afed1085bf8f95313578ddbd32d7334ed1" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="43004330c77e44fe570067612cb5b7edb66a8a88f13a3a2e135afe91eed9b1cf" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="8326e48642f3f5e1dfb591507617ae8b60f4378e8812d85a21e4db2d95186d36" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="dfa3518df0d4ee087ca0376083b179a40649d23ffd7faa8c678b9c43ec83b0f3" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="f458d79b57b7c6f8184015beab49d6d9f1d97c50068777c98b31167871e5e2a6" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="127a196750f4e9d15b9b654e8113d8c024ab09f0db4138f56b0841b254e9c952" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="0c04a2b26fdf901b68abba0d1a00e10e97f4ea93c03d722a4b6fb6ba6c82599f" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="39de4fd7c0037f62eaff0f1da1b2b928aeb6e533718fcd11e4c97bcd143cfd60" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="dcc9de43489ab17a5081f7aae2884cedd2992e430decf1082aa7664f93a937a8" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="d22af9ad0ce0b0f7ec926dd0b74d80d90f05355e79adbd766a01fe848ecb9a19" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="053de97f7e64f4ec23a118b628cf2d1cfd4c91094c09a0e3bac57de37475719a" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="ed48854736931f4156c8284ec31661a7d90195352060ebe342c4f6a053038a11" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="a741d4a89a600991f566d450ad76dce638dd6573bcb81b2a2eb705acec6b7ed2" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="3160561a404b3dfe5fc8bc16c1892c614ae9c10ff13350c6a83699f24e88e28e" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="47ff245cd18d5189ea4033ef5571df14d023c7409a2dd97aac4bdf176d4b5a32" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="2af39178cff2fb4fd0e73a2342fdbcd69b2e44c8726081e263fd0ec6d57484f4" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="fc3f8d45f683e3be5b7b5af3e63a53b1bc85f18244b9b80e6b6e06fd29c4fadb" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="7efc1f811fcf9b1b9506477e98d91d028923e29e9e53b65b854006210e823357" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="25541f0e8ea9d69b79ad3b506cf40f30236a1dab360358ecfa3b6c17c3ca35f4" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="909f41a6a9e64d1cf56fe12e1edfea59153c6d23506af622d80f9db73ec7d6d2" name="jss" arch="x86_64">
  <version epoch="0" ver="4.4.0" rel="9.el7_4"/>
  <changelog author="Jack Magne &lt;jmagne@redhat.com&gt; - 4.2.6-44" date="1487764800">- Bugzilla Bug #1425971 - Simple problem unwrapping AES sym keys on token</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.4.0-1" date="1489406400">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- ## JSS 4.4.0 includes the following patches ported from downstream:
- Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
- Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
- Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
  CS interface
- Mozilla Bugzilla #1307993 - Expose updated certificate verification function
  in JSS
- Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
  pointer arithmetic
- Mozilla Bugzilla #1308001 - Verification should fail when a revoked
  certificate is added
- Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
- Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
  (HSM + NSS)
- Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
- Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
- Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
  unwrapping keys should be done in the token
- Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
  manufacturer identifier
- Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
  JSS 4.2.6
- Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
  TLS v1.2 via NSS through JSS
- Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
  error from NSS
- Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
- Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
- Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
- Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
  PKCS#11 bypass support
- Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
- Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
  in FIPS Mode and ECC algorithms
- Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
  functions
- Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
- ## JSS 4.4.0 includes the following changes for building and testing:
- Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
- Mozilla Bugzilla #1346420 - Document steps required to use the proper
  libjss4.so when running certain HMAC Algorithms tests</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-2" date="1489579200">- Added Conflicts statement due to incompatibility with tomcatjss &lt; 7.2.1</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
</package>
<package pkgid="2e484ae81e52e272bd9bd28d40a85bea2c34d321d7fcf191380d962b10d07971" name="jss-javadoc" arch="x86_64">
  <version epoch="0" ver="4.4.0" rel="9.el7_4"/>
  <changelog author="Jack Magne &lt;jmagne@redhat.com&gt; - 4.2.6-44" date="1487764800">- Bugzilla Bug #1425971 - Simple problem unwrapping AES sym keys on token</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.4.0-1" date="1489406400">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- ## JSS 4.4.0 includes the following patches ported from downstream:
- Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
- Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
- Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
  CS interface
- Mozilla Bugzilla #1307993 - Expose updated certificate verification function
  in JSS
- Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
  pointer arithmetic
- Mozilla Bugzilla #1308001 - Verification should fail when a revoked
  certificate is added
- Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
- Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
  (HSM + NSS)
- Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
- Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
- Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
  unwrapping keys should be done in the token
- Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
  manufacturer identifier
- Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
  JSS 4.2.6
- Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
  TLS v1.2 via NSS through JSS
- Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
  error from NSS
- Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
- Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
- Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
- Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
  PKCS#11 bypass support
- Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
- Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
  in FIPS Mode and ECC algorithms
- Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
  functions
- Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
- ## JSS 4.4.0 includes the following changes for building and testing:
- Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
- Mozilla Bugzilla #1346420 - Document steps required to use the proper
  libjss4.so when running certain HMAC Algorithms tests</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-2" date="1489579200">- Added Conflicts statement due to incompatibility with tomcatjss &lt; 7.2.1</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
</package>
<package pkgid="e6825ebd1959719c61ff253afbd6a5a7359ff9f789193d3d65bc524b1b1073ef" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-685.el7]" date="1497873600">- [mm] enlarge stack guard gap (Larry Woodman) [1452733] {CVE-2017-1000364}
- [mm] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1462267]
- [fs] nfs: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask (Benjamin Coddington) [1449466]
- [hid] hid_wacom: temporaly disable power_supply usage from driver (Aristeu Rozanski) [1458348]
- [drm] mgag200: Fix to always set HiPri for G200e4 V2 (Rob Clark) [1461985]
- [nvme] submit nvme_admin_activate_fw to admin queue (David Milburn) [1456978]
- [netdrv] i40e: set VFs to untrusted mode by default (Stefan Assmann) [1462105]
- [netdrv] tun: use symmetric hash (Jason Wang) [1458645]
- [crypto] qat: copy back iv on completion (Neil Horman) [1446394]
- [crypto] chcr - Fix txq ids (Sai Vemuri) [1457392]
- [crypto] chcr - fix itnull.cocci warnings (Sai Vemuri) [1426189]
- [crypto] chcr - Change flow IDs (Sai Vemuri) [1426189]
- [crypto] chcr - Check device is allocated before use (Sai Vemuri) [1426189]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
</package>
<package pkgid="1c9eb5e0a7155ed582893c35d0ceeb7923ec837013b16395c51031210849e211" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
</package>
<package pkgid="7f565b06c8bf2d7dd5398512eef7d8bc786fbcb4e4c19cee91bfbe9b82bd57e9" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
</package>
<package pkgid="89c2d810ae2d98cf6b0fb92469f99ed56bd26fd75984b583a9a2d38312bd935d" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
</package>
<package pkgid="6eb96fc267ed495a83cdc78dc7e36c50c68846c1824a7ec8f3a369998f7e3666" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
</package>
<package pkgid="aa72158ec4ee3db9b1d689c4a551297b90e7d4fdaf254244d9841b481c4e5954" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="08a8141c6c6d2bc09d93f00f7febddbe223d6a24ae718796659ae72e39f66c39" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
</package>
<package pkgid="b80fc767735b2c3d4fde6e9529f47888cc73f3748e83369526f38cb38990e171" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
</package>
<package pkgid="83e66c1288a43f23fa269a0eaf67d3a4fa2c0595aa24d570bf0d97dd10a6b5b0" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-685.el7]" date="1497873600">- [mm] enlarge stack guard gap (Larry Woodman) [1452733] {CVE-2017-1000364}
- [mm] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1462267]
- [fs] nfs: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask (Benjamin Coddington) [1449466]
- [hid] hid_wacom: temporaly disable power_supply usage from driver (Aristeu Rozanski) [1458348]
- [drm] mgag200: Fix to always set HiPri for G200e4 V2 (Rob Clark) [1461985]
- [nvme] submit nvme_admin_activate_fw to admin queue (David Milburn) [1456978]
- [netdrv] i40e: set VFs to untrusted mode by default (Stefan Assmann) [1462105]
- [netdrv] tun: use symmetric hash (Jason Wang) [1458645]
- [crypto] qat: copy back iv on completion (Neil Horman) [1446394]
- [crypto] chcr - Fix txq ids (Sai Vemuri) [1457392]
- [crypto] chcr - fix itnull.cocci warnings (Sai Vemuri) [1426189]
- [crypto] chcr - Change flow IDs (Sai Vemuri) [1426189]
- [crypto] chcr - Check device is allocated before use (Sai Vemuri) [1426189]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
</package>
<package pkgid="6d3901f154f994bed5d5bb2b8b7cb00684a8be99fccfd1d38715e71e53ad5a03" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
</package>
<package pkgid="e36cb19de335a1279dea525684642ef52d4ca3b2de357170d7fdc857a90b570e" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
</package>
<package pkgid="dfa1d0014aedca72f6f5a468bd07393c8b23eec9374d4f84884a4c494022d7c9" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
</package>
<package pkgid="84e02642b2e6ea6f9f5bd2a8d60b67de2a47e9dee983f6066a3fb1a733419f31" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
</package>
<package pkgid="dcf60f589f2d586698470f6829eede9e5728c7b55c70525229f6d889ad28111b" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="a8851937e2160abadabb09a26c2482ebd890aba55a2a211d18151e9803921274" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
</package>
<package pkgid="5966665a081b5c5e56c50712c492ec3a5b3b2f3223fb8c10e84b657b37f63c89" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
</package>
<package pkgid="ab537108282cbb110946615bc0f08de343e4a1b9223fb9a29374c272ec14b36b" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-685.el7]" date="1497873600">- [mm] enlarge stack guard gap (Larry Woodman) [1452733] {CVE-2017-1000364}
- [mm] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1462267]
- [fs] nfs: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask (Benjamin Coddington) [1449466]
- [hid] hid_wacom: temporaly disable power_supply usage from driver (Aristeu Rozanski) [1458348]
- [drm] mgag200: Fix to always set HiPri for G200e4 V2 (Rob Clark) [1461985]
- [nvme] submit nvme_admin_activate_fw to admin queue (David Milburn) [1456978]
- [netdrv] i40e: set VFs to untrusted mode by default (Stefan Assmann) [1462105]
- [netdrv] tun: use symmetric hash (Jason Wang) [1458645]
- [crypto] qat: copy back iv on completion (Neil Horman) [1446394]
- [crypto] chcr - Fix txq ids (Sai Vemuri) [1457392]
- [crypto] chcr - fix itnull.cocci warnings (Sai Vemuri) [1426189]
- [crypto] chcr - Change flow IDs (Sai Vemuri) [1426189]
- [crypto] chcr - Check device is allocated before use (Sai Vemuri) [1426189]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
</package>
<package pkgid="492c6abc71e2cf4a99a6704c8e1826c9b0f48032aabbf328e7b4803ee16d28c2" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
</package>
<package pkgid="bc2681929c8802ba4522892ffa86491689b79f48a1bed97384a2827858234e4f" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
</package>
<package pkgid="662b7f3a7881d3b227ef6b3cdc6c5844b7c51d46ca3b7d58b0e534ab2d22a6dc" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
</package>
<package pkgid="df24444601ab3704458be9c19a77d5f60c23b5541f61e0c3b9e34a761b58e7cd" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
</package>
<package pkgid="57be212392dfc887b627063fd6282887f0c30c78d07cafdac50918d6ed482e66" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="29279883d272a24f6dc2dde47bc0eb517a2d6af1460dc0b2617d28791c3a4e91" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
</package>
<package pkgid="cbcb55aa17cd1c0d6685d8cddd24c6ae7091716aaf69fddd2d38f3830e834b0e" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
</package>
<package pkgid="1194b6c879ede600e4193c9bfbc9d6e3dc8f23cd996739b519c4f985650dc15a" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-685.el7]" date="1497873600">- [mm] enlarge stack guard gap (Larry Woodman) [1452733] {CVE-2017-1000364}
- [mm] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1462267]
- [fs] nfs: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask (Benjamin Coddington) [1449466]
- [hid] hid_wacom: temporaly disable power_supply usage from driver (Aristeu Rozanski) [1458348]
- [drm] mgag200: Fix to always set HiPri for G200e4 V2 (Rob Clark) [1461985]
- [nvme] submit nvme_admin_activate_fw to admin queue (David Milburn) [1456978]
- [netdrv] i40e: set VFs to untrusted mode by default (Stefan Assmann) [1462105]
- [netdrv] tun: use symmetric hash (Jason Wang) [1458645]
- [crypto] qat: copy back iv on completion (Neil Horman) [1446394]
- [crypto] chcr - Fix txq ids (Sai Vemuri) [1457392]
- [crypto] chcr - fix itnull.cocci warnings (Sai Vemuri) [1426189]
- [crypto] chcr - Change flow IDs (Sai Vemuri) [1426189]
- [crypto] chcr - Check device is allocated before use (Sai Vemuri) [1426189]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
</package>
<package pkgid="fa584e771f7cc91fbde0556c69a4ffb4c7ab4a0913695f4f825338b662acca50" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
</package>
<package pkgid="94030849f715ed34eb1c7475b22a7162c5c12f27bfb47f3c237f7d3988be020a" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
</package>
<package pkgid="f1c7c2fbca3c2430eecf703b8984df69b3691aef638718b2764abc3011bd03ba" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
</package>
<package pkgid="fa9909521e09a1b972dbbf8db030519197a96cd7cfc6dfbf5e14dabbc29f9767" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
</package>
<package pkgid="bb17feeb484d0d81a357d03ae4d8a901e3a7d46766cd5ce21ddcc8d536ff772f" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="540f7f5ada9f07313896d74978d27ff6c6c6cab72af5f66f3b48cb99cc15ca8c" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
</package>
<package pkgid="02e1c4f387fe02007a14208319da919772927fe3e63cefe93dab78db7f38327a" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
</package>
<package pkgid="fa667e3f47edb5e21d70efa4adc4fdc9ba96b8c73ba6f64b2381949f4197bc7a" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-685.el7]" date="1497873600">- [mm] enlarge stack guard gap (Larry Woodman) [1452733] {CVE-2017-1000364}
- [mm] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1462267]
- [fs] nfs: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask (Benjamin Coddington) [1449466]
- [hid] hid_wacom: temporaly disable power_supply usage from driver (Aristeu Rozanski) [1458348]
- [drm] mgag200: Fix to always set HiPri for G200e4 V2 (Rob Clark) [1461985]
- [nvme] submit nvme_admin_activate_fw to admin queue (David Milburn) [1456978]
- [netdrv] i40e: set VFs to untrusted mode by default (Stefan Assmann) [1462105]
- [netdrv] tun: use symmetric hash (Jason Wang) [1458645]
- [crypto] qat: copy back iv on completion (Neil Horman) [1446394]
- [crypto] chcr - Fix txq ids (Sai Vemuri) [1457392]
- [crypto] chcr - fix itnull.cocci warnings (Sai Vemuri) [1426189]
- [crypto] chcr - Change flow IDs (Sai Vemuri) [1426189]
- [crypto] chcr - Check device is allocated before use (Sai Vemuri) [1426189]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
</package>
<package pkgid="6beaec3916780715366fc131a52388eebf789d5d068c9efbcc10f4f25ca6f4eb" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
</package>
<package pkgid="35353780518f8c8fe6cc4d7bc22d06975f0e2d499772e990fc0d998f7acd0835" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
</package>
<package pkgid="0813d81b7b2d7095d48b902ef1cab418ee1bfcaea57d696d213a00806b11f486" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
</package>
<package pkgid="4c433164d95d2e50f9494c2e0970a8c7946a17143f2a6a728e0a8319020bd98b" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
</package>
<package pkgid="2aede1ae5682ca1957c564166c23323e49a98c66ab59de6a10af879adb026c79" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="89f8ed0e3c311193b8d539f05da5ff35898425a58d22c525b98e3fed1f2cc865" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
</package>
<package pkgid="f7341465794c56878a1b0a8979dc7e0d668a46c86960ba5138b60bb46dce310a" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
</package>
<package pkgid="e75926ddc4d7b166230149878b3dfa8daad7a9482bade04671ee35cb9b1bb033" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-685.el7]" date="1497873600">- [mm] enlarge stack guard gap (Larry Woodman) [1452733] {CVE-2017-1000364}
- [mm] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1462267]
- [fs] nfs: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask (Benjamin Coddington) [1449466]
- [hid] hid_wacom: temporaly disable power_supply usage from driver (Aristeu Rozanski) [1458348]
- [drm] mgag200: Fix to always set HiPri for G200e4 V2 (Rob Clark) [1461985]
- [nvme] submit nvme_admin_activate_fw to admin queue (David Milburn) [1456978]
- [netdrv] i40e: set VFs to untrusted mode by default (Stefan Assmann) [1462105]
- [netdrv] tun: use symmetric hash (Jason Wang) [1458645]
- [crypto] qat: copy back iv on completion (Neil Horman) [1446394]
- [crypto] chcr - Fix txq ids (Sai Vemuri) [1457392]
- [crypto] chcr - fix itnull.cocci warnings (Sai Vemuri) [1426189]
- [crypto] chcr - Change flow IDs (Sai Vemuri) [1426189]
- [crypto] chcr - Check device is allocated before use (Sai Vemuri) [1426189]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
</package>
<package pkgid="7aaddc06c992fe28673faa56c884db7cb6ac7045067f27133c181224ae4f58d7" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
</package>
<package pkgid="e8b1414170c28e5d85a2c32abb80798f84f0316fa38bd7f85b4a5dfa73c10535" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
</package>
<package pkgid="153f341e01ff85ab2a35ff6e280c3ab6d0bd11abbcf7a5dad2e6bb1de2c2946a" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
</package>
<package pkgid="1f81486b18995a9025944714a319c3e300df68da6d69d779f470712befb7e0c9" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
</package>
<package pkgid="891c8e90fb5ab72c293bc6ed0effaf53bfd5538b8d8ff21e3ab72668406dfa83" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="ffe08ae78b6a461192ce40a2033457ef44873dbfa4847b63c6865d2114519198" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
</package>
<package pkgid="bb4e77d4d20c81682c963412d5fb46fe25f429ae06e0fb95493077eaadd9e08e" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
</package>
<package pkgid="caf829b32c2345185d292cdeedeb91acf87aff1414541b782bedd02e22f2f362" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-685.el7]" date="1497873600">- [mm] enlarge stack guard gap (Larry Woodman) [1452733] {CVE-2017-1000364}
- [mm] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1462267]
- [fs] nfs: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask (Benjamin Coddington) [1449466]
- [hid] hid_wacom: temporaly disable power_supply usage from driver (Aristeu Rozanski) [1458348]
- [drm] mgag200: Fix to always set HiPri for G200e4 V2 (Rob Clark) [1461985]
- [nvme] submit nvme_admin_activate_fw to admin queue (David Milburn) [1456978]
- [netdrv] i40e: set VFs to untrusted mode by default (Stefan Assmann) [1462105]
- [netdrv] tun: use symmetric hash (Jason Wang) [1458645]
- [crypto] qat: copy back iv on completion (Neil Horman) [1446394]
- [crypto] chcr - Fix txq ids (Sai Vemuri) [1457392]
- [crypto] chcr - fix itnull.cocci warnings (Sai Vemuri) [1426189]
- [crypto] chcr - Change flow IDs (Sai Vemuri) [1426189]
- [crypto] chcr - Check device is allocated before use (Sai Vemuri) [1426189]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
</package>
<package pkgid="df46468860e2ec44198a7f6c75c17526df6b7a256e575143d61495434844a2dc" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
</package>
<package pkgid="cd23d82dad8a8c0e17962fcb6865c8931b5803479248adb7a181175b77055433" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
</package>
<package pkgid="5e6b4c609ea8d7a50b4294650be784a5c4f964df525049c448ec03c3c3e92794" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
</package>
<package pkgid="c4a1beab2d4ee5d38c878a988e089728982186e70a70e3502b6ff7892b762c85" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
</package>
<package pkgid="ef8864ddcb569f5bc342751042263d7c6f37fad5806a288cbf0eb2bbc6dd8e89" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="753d433a6cf554ccfeb393cc698b3ce80d40bba61c1f54630afde305c1a86f23" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
</package>
<package pkgid="7fd00b37ba5f8fef90bdab47d543c5ecefbe99c7e28b0543cce219c6c57739a0" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
</package>
<package pkgid="47e3dfc9d54998a9037ffa7deaa6dae85cc8e7bf89174227ae130156842e39af" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-685.el7]" date="1497873600">- [mm] enlarge stack guard gap (Larry Woodman) [1452733] {CVE-2017-1000364}
- [mm] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1462267]
- [fs] nfs: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask (Benjamin Coddington) [1449466]
- [hid] hid_wacom: temporaly disable power_supply usage from driver (Aristeu Rozanski) [1458348]
- [drm] mgag200: Fix to always set HiPri for G200e4 V2 (Rob Clark) [1461985]
- [nvme] submit nvme_admin_activate_fw to admin queue (David Milburn) [1456978]
- [netdrv] i40e: set VFs to untrusted mode by default (Stefan Assmann) [1462105]
- [netdrv] tun: use symmetric hash (Jason Wang) [1458645]
- [crypto] qat: copy back iv on completion (Neil Horman) [1446394]
- [crypto] chcr - Fix txq ids (Sai Vemuri) [1457392]
- [crypto] chcr - fix itnull.cocci warnings (Sai Vemuri) [1426189]
- [crypto] chcr - Change flow IDs (Sai Vemuri) [1426189]
- [crypto] chcr - Check device is allocated before use (Sai Vemuri) [1426189]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
</package>
<package pkgid="163e02eb83a5b8e6ecb62d87edaf95e971e53421ac216423b7fccfc459c9e3ce" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
</package>
<package pkgid="e2691cbd7acb0b3de848dd0860ec596ef72bc84fdd8025e36d20020bca1aaa17" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
</package>
<package pkgid="18e3a7f4e85c63e29278a9f9ae927620586f78ecd243461cd3624667bf46a0b8" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
</package>
<package pkgid="18362740647c1e596658e60fa9ad1abb33f579db588a265ddb0c16c0e974b89d" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
</package>
<package pkgid="4314ff72af70879d480b0a69e05b2ee39d81dee79f3bfb5b49e1ccf07c126384" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="f0a04ab451a1092df7691e88e692a9a5f9b3a152002075e15258e61bc69b5c26" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
</package>
<package pkgid="ee4a33a2bb16d07db13d02d002d3bfe1d3b78a5f93d68355dfe0a658944be0a6" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
</package>
<package pkgid="11f6cd9627c177f88a99595a29fa99346b879c45e4f015883124bce427612b12" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-685.el7]" date="1497873600">- [mm] enlarge stack guard gap (Larry Woodman) [1452733] {CVE-2017-1000364}
- [mm] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1462267]
- [fs] nfs: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask (Benjamin Coddington) [1449466]
- [hid] hid_wacom: temporaly disable power_supply usage from driver (Aristeu Rozanski) [1458348]
- [drm] mgag200: Fix to always set HiPri for G200e4 V2 (Rob Clark) [1461985]
- [nvme] submit nvme_admin_activate_fw to admin queue (David Milburn) [1456978]
- [netdrv] i40e: set VFs to untrusted mode by default (Stefan Assmann) [1462105]
- [netdrv] tun: use symmetric hash (Jason Wang) [1458645]
- [crypto] qat: copy back iv on completion (Neil Horman) [1446394]
- [crypto] chcr - Fix txq ids (Sai Vemuri) [1457392]
- [crypto] chcr - fix itnull.cocci warnings (Sai Vemuri) [1426189]
- [crypto] chcr - Change flow IDs (Sai Vemuri) [1426189]
- [crypto] chcr - Check device is allocated before use (Sai Vemuri) [1426189]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
</package>
<package pkgid="f9a9c4cc1f78fa350ff746bc69602651fdb6be96245d00a75e13f4857f833fca" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
</package>
<package pkgid="d7da4c01b0c007ff2929efb3742649f8f79883a8f45313e45848b356c92bdb09" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
</package>
<package pkgid="0d2b6214ebdac703423ff9a77fb3a6fbcad2604e4b92376a523d9bd90a9a65f2" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
</package>
<package pkgid="ac86b8e1e64cdc640c1ef53ae08670e474712840630e27174a2cb81cdd899dbc" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
</package>
<package pkgid="4d0fd5011eebd16088ff1f8479accea09a28a35bff1aee0cc20c810e0156cb40" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="e7e7e0927347a6edc8b3d7295e68ea4a625e01950dbbf27679eb6235c61ba3dc" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
</package>
<package pkgid="173592f98651fca8bfb5a05da7b9f0eb2738bc5009c616acc3f83619cb66d42b" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
</package>
<package pkgid="c0a2a095c2a2877bb906d2a51a4a122ad8c5caa5cfbe8513c43d3f5c8540bec8" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-685.el7]" date="1497873600">- [mm] enlarge stack guard gap (Larry Woodman) [1452733] {CVE-2017-1000364}
- [mm] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1462267]
- [fs] nfs: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask (Benjamin Coddington) [1449466]
- [hid] hid_wacom: temporaly disable power_supply usage from driver (Aristeu Rozanski) [1458348]
- [drm] mgag200: Fix to always set HiPri for G200e4 V2 (Rob Clark) [1461985]
- [nvme] submit nvme_admin_activate_fw to admin queue (David Milburn) [1456978]
- [netdrv] i40e: set VFs to untrusted mode by default (Stefan Assmann) [1462105]
- [netdrv] tun: use symmetric hash (Jason Wang) [1458645]
- [crypto] qat: copy back iv on completion (Neil Horman) [1446394]
- [crypto] chcr - Fix txq ids (Sai Vemuri) [1457392]
- [crypto] chcr - fix itnull.cocci warnings (Sai Vemuri) [1426189]
- [crypto] chcr - Change flow IDs (Sai Vemuri) [1426189]
- [crypto] chcr - Check device is allocated before use (Sai Vemuri) [1426189]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
</package>
<package pkgid="d73ba82bc2fd7d6df6b63b3a39f59c7b78d0ce9ff1be10689a45cbc39732e671" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
</package>
<package pkgid="b3b5107b63148a9df8ef419488ef9c99e7b9e162e9ee6ff8f960443b3e119ebd" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
</package>
<package pkgid="42de3ea44b2a1985901bf720a02632209164672b60117823086762a46ca46aff" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
</package>
<package pkgid="b0292813cbc30da39bfed7c605fcc0c18e92e2076551a14058b3d8745d27f39b" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
</package>
<package pkgid="18f7cd0be256048e0aea3f1b21007978136dc806375acc6964467521c89c2897" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="24207f8dc8c1faac8dd18dec6a5f16a5bd495da4243544c6c557acae5d22f4da" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
</package>
<package pkgid="0cd40bc009c2f5fd573eb694482565ff04b5514de9788e742c9f86a02bc73b97" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
</package>
<package pkgid="86d96c2fbbfc11312ddbd6b44d198e199be122764f5da7117a964a80fe6bcc3e" name="kexec-tools" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="17.2.el7_4"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-10" date="1494849600">- kdumpctl: call strip_comments only when necessary to speedup
- Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-11" date="1496232000">- makedumpfile: Fix refiltering, sadump and virsh dump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-12" date="1496318400">- kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
- Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-13" date="1496836800">- kdumpctl: change the shebang header to use /bin/bash</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-14" date="1497268800">- kdump.conf.5: clarify the fence_kdump_nodes option
- kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-15" date="1498132800">- Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
- udev rules: mask cpu hotplug rules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-16" date="1498219200">- udev rules: fix the hotplug rule file removing path</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17" date="1498564800">- revert udev rule changes</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17.1" date="1505476800">- fadump: rebuild default initrd with dump capture capability</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; 2.0.14-17.2" date="1506427200">- tools: powerpc: fix command line overflow error</changelog>
</package>
<package pkgid="fec206604d6a2b38f9d16832b4d91426f1632e40991a49eb9c6c839fc392f4b9" name="kexec-tools-anaconda-addon" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="17.2.el7_4"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-10" date="1494849600">- kdumpctl: call strip_comments only when necessary to speedup
- Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-11" date="1496232000">- makedumpfile: Fix refiltering, sadump and virsh dump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-12" date="1496318400">- kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
- Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-13" date="1496836800">- kdumpctl: change the shebang header to use /bin/bash</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-14" date="1497268800">- kdump.conf.5: clarify the fence_kdump_nodes option
- kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-15" date="1498132800">- Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
- udev rules: mask cpu hotplug rules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-16" date="1498219200">- udev rules: fix the hotplug rule file removing path</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17" date="1498564800">- revert udev rule changes</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17.1" date="1505476800">- fadump: rebuild default initrd with dump capture capability</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; 2.0.14-17.2" date="1506427200">- tools: powerpc: fix command line overflow error</changelog>
</package>
<package pkgid="e61c178bd3624ad5e95d902a2476224fcac833a1bf92c08d40930fae38184965" name="kexec-tools-eppic" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="17.2.el7_4"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-10" date="1494849600">- kdumpctl: call strip_comments only when necessary to speedup
- Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-11" date="1496232000">- makedumpfile: Fix refiltering, sadump and virsh dump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-12" date="1496318400">- kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
- Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-13" date="1496836800">- kdumpctl: change the shebang header to use /bin/bash</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-14" date="1497268800">- kdump.conf.5: clarify the fence_kdump_nodes option
- kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-15" date="1498132800">- Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
- udev rules: mask cpu hotplug rules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-16" date="1498219200">- udev rules: fix the hotplug rule file removing path</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17" date="1498564800">- revert udev rule changes</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17.1" date="1505476800">- fadump: rebuild default initrd with dump capture capability</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; 2.0.14-17.2" date="1506427200">- tools: powerpc: fix command line overflow error</changelog>
</package>
<package pkgid="36b5818acb7e4497d8b2dace21e47ec13f6abc9e6ea79ea8aba3d67f4ac33128" name="kmod" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="7260063a3adc6dd3abfc657c7594f9f27721d26d752138e7421adb57632a8241" name="kmod" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="15c2a863c84f6f24740ce88785c3fc407464067c1af16fd53e13a8aa9401c934" name="kmod" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="e299f53cccfb31d082365e5e1d6b2bd97c21252af747f298cb5f870a554536c0" name="kmod" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="e7e696e3397194fd4730ec960250c0c3a4b55453f8e9c858c700a576e61e75f2" name="kmod-devel" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="59a5cf56feacc19c4aaab3a2b9c1c8698488140dd4b789483d01522f9aa470fb" name="kmod-devel" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="a549ed8a31ce147808092a49afa0caa290f08bc6c94d8e7db5064681a602acd2" name="kmod-devel" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="b9c18d56fda3eabfa0457f2772fcfc9c8adcd78e500149cd153d227cabab8e79" name="kmod-devel" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="58de1dad17e4558b9f83cf2c3a7e6b5a4712d54a6b1f27d97c23891152a5fe1b" name="kmod-devel" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="13dce0350ce301b0603e2856a8cb91c2a624ba5b3096340df5939189f5ac3a09" name="kmod-devel" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="85ebf24211daf0c6042430b6d87890beeb5cc394577cfb8585690cf5d642729b" name="kmod-devel" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="76768c47d34898af620405c367f3cffd84cad0105ab992c2a42b9a5374344fc1" name="kmod-devel" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="b4f52beb4295b7ccb86e2595934eec79fed8fee5355c672dc5b66da19b849523" name="kmod-libs" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="e949cdd9169bfa6cb73a3dd362a7e4a9bc99ae6b47498a4a0696ce455984d2ec" name="kmod-libs" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="ef362d6871a790ce837abb085fc2821d142cc8cdee3fee32f17d287af56232e4" name="kmod-libs" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="250763f499c6e8fb1798ee84a8cee90ed3de3f596211e06776bb6864ef38e6d0" name="kmod-libs" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="031cbc1e000279ccd0254f270dec91ed1fd1375d7c2f505ab79f8d55b71e14ce" name="kmod-libs" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="830d3c31b8b4739a3159c05c28823b427360dbaceae4130fdc83b77213120ba3" name="kmod-libs" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="c5a32f386fa16ad58f7eb25501b42e37f9f7e655fd21428406405cc7eae503f4" name="kmod-libs" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="dfd585b84e730a42faaaacdb83d4d49016be02614da83f261a081e92e713807f" name="kmod-libs" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="a01c52f48c3137f99dd66fd08dee44e9ab51f974f55c2f1222c46d0ac5d0ec8b" name="kmod-redhat-i40e" arch="x86_64">
  <version epoch="0" ver="2.1.14_k_dup7.4" rel="2.1.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-1" date="1519732800">- 141332170ff595319ce42a2cfc2944c2cbb11b4f
- i40e module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-2" date="1519905600">- Rebuilt with -mindirect-branch=thunk-inline -mindirect-branch-register flags.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-2.1" date="1521115200">- Added modinfo flag for retpoline.
- Resolves: #bz1549986</changelog>
</package>
<package pkgid="3f3b4f5868009c8894c7bf50d2a2955eabb8b659ac16f553dd632f359bb3d6bb" name="kmod-redhat-i40evf" arch="x86_64">
  <version epoch="0" ver="3.0.1_k_dup7.4" rel="2.1.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 3.0.1_k_dup7.4-1" date="1519732800">- 141332170ff595319ce42a2cfc2944c2cbb11b4f
- i40evf module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 3.0.1_k_dup7.4-2" date="1519905600">- Rebuilt with -mindirect-branch=thunk-inline -mindirect-branch-register flags.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-2.1" date="1521115200">- Added modinfo flag for retpoline.
- Resolves: #bz1549985</changelog>
</package>
<package pkgid="19289357756f695f56552ad008ae95a67effeb27eb974327546d8de664547085" name="kmod-redhat-qed" arch="x86_64">
  <version epoch="0" ver="8.10.10.21_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qed module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="c164404842f057030b5011400d63b3e6302fe3caa877c112e7faca3ca80cbd81" name="kmod-redhat-qede" arch="x86_64">
  <version epoch="0" ver="8.10.10.21_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qede module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="9b24967cd82a0d705650561ed373d052704555a22cab284ea4336afadb945831" name="kmod-redhat-qedf" arch="x86_64">
  <version epoch="0" ver="8.10.7.0_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.7.0_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qedf module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.7.0_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="b53df1afa4380758a311f5b37d1a7ca0b9ff7f8c07b0ffe36fdcf448c7b0b14c" name="kmod-redhat-qedi" arch="x86_64">
  <version epoch="0" ver="8.10.4.0_dup7.4" rel="3.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.4.0_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qedi module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.4.0_dup7.4-2" date="1513252801">- Remove ppc architectures</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.4.0_dup7.4-3" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="44931f1b872467ab2d0cc710afe303e231e75ba8c5da3af6f70cf4c78ffec2b1" name="kmod-redhat-qedr" arch="x86_64">
  <version epoch="0" ver="8.10.10.0_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.0_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qedr module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.0_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="249edc90508685b3861e027e03013be32b8efe1220c53b930536dddd9771a09d" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="76ba94a084dbfd176e9ed085530d064997bf2b800ce3a75c20b9f75cd9348853" name="kpatch" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="2.el7_4"/>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.1.8-1" date="1405425600">- update to kpatch 0.1.8</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.1.9-1" date="1406116800">- update to kpatch 0.1.9</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.1.10-1" date="1406808000">- update to kpatch 0.1.10</changelog>
  <changelog author="Seth Jennings &lt;sjenning@redhat.com&gt; 0.1.10-2" date="1410436800">- support modprobe format names (rhbz#1133045)</changelog>
  <changelog author="Seth Jennings &lt;sjenning@redhat.com&gt; 0.1.10-3" date="1410868800">- support re-enabling forced modules (rhbz#1140268)</changelog>
  <changelog author="Seth Jennings &lt;sjenning@redhat.com&gt; 0.1.10-4" date="1410868801">- fix dracut dependencies (rhbz#1170369)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.1-1" date="1447848000">- update to 0.3.1 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.2-1" date="1465992000">- update to 0.3.2 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-1" date="1489406400">- update to 0.4.0 (rhbz#1427642)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-2" date="1508328000">- fix backwards compatibility with RHEL 7.3 patches (rhbz#1497735)</changelog>
</package>
<package pkgid="135b43f97391338ce1907afe55bf5c5668ac0afdc264048b0f4aa93d6d909567" name="ksh" arch="x86_64">
  <version epoch="0" ver="20120801" rel="35.el7_4"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-26" date="1461672000">- closing a file descriptor in a command substitution caused loss of the output (#1202439)
- fix: in a login shell "( cmd &amp; )" does nothing (#1217237)
- exporting fixed with variable corrupted its data (#1192026)
- fix segfault when handling a trap (#1211540)
- combining alarm and IFS caused segfault (#1192119)
- declaration of a two dimemsional associatve array could add an extra 0 element (#1193557)
- do not inherit invalid variables during shell initializaton (#1211538)
- case in a for loop inside a subshell caused syntax error (#1241014)</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-27" date="1486728000">- bump release
  Resolves: #1391931</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-28" date="1486728001">- Fix a bug in memory allocation while listing indexed arrays with typeset
  Resolves: #1371630</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-29" date="1486728002">- Fix a crash during clean up after sourcing multiple files
  Resolves: #1321443</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-30" date="1486728003">- Fix a memory leak in subshell when PATH is set
  Resolves: #1405784</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-31" date="1486728004">- Fix a memory leak on unset of associative array
  Resolves: #1189297</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-32" date="1486728005">- Treat unset parameters as error
  Resolves: #1222025</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-33" date="1486728006">- Prevent null-test optimization in strdup
  Resolves: #1269088</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-34" date="1486728007">- Multibyte character string after $1-9 was not expanded correctly
  Resolves: #1299484</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
</package>
<package pkgid="5d2f4e298eed116de906dda65ee41d8430f9f7ed790c82caf1215f43ecd12c02" name="libasan" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="5b37d7385200659916b8e10e837d1a16db7bc4e011d76bf243e75c5258670c02" name="libasan" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="8dd23904a6ec21e474eac570349d7d5b72a2a5f6594cf9bf0287a8de97c0a54a" name="libasan" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="9e3bd4aacbffe50b085fc4c9afc47fba0ccf8366a7becabc3fb5b8df2ef37ee1" name="libasan" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="ccde4d44fb4a334c1044550852add8f4de8ad49e1914ee6a7d8d4668a26063b4" name="libasan-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="99159ea68120460c7d9645d27b57b810a923a9ef80882ebc9176aa7e411c150c" name="libasan-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="077194d1068c691e3bccbb8519a7f4727b53d4b58a4ad752a44446494d17e1f4" name="libasan-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="63e8e12d0a6e7794bb8258b8a3608bcd57f4b2ea8952bbcf46996d0f04eac434" name="libasan-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="d39a9a2df05b83a062bf87e8f7d92aba10068789462e1f2d67d80693f38f31ed" name="libatomic" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="f439f5ae91dc1c979ae5f3a552e6c7db698970b4234fd439a7df895651ec8fc2" name="libatomic" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="8ce9923c83fae3820e622b94a513a18181d0e308079f7a180691774857f1933d" name="libatomic" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="f95f1f6399d6e3de81087c6f3bccea2ddfe769ced1ffbb6f291af03fd5eed9fa" name="libatomic" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="6ada97ce517cf388c379257f7615e58bcb7f1b7adfadf7b2cec7e6f7c1400fb5" name="libatomic-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="5a0613a8c94b1e515e60ddc112aa8e3fd63d37096a403ae1464e929067535987" name="libatomic-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="25977379d15f6fba95e5b2e67ac01fdd6171c40f0689c5a4a1402e8bb920769c" name="libatomic-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="2ff270cf5e9977fc174246178c795753cade392a1aa2c94eba962cbb1cbc8654" name="libatomic-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="8b260e5c04c928f6439e2c9861d698c163364e4e5aab43e2ea7b7765b322b901" name="libblkid" arch="i686">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="8b95c62f3f2e35485cff7be51acd08c68e6ce4c856781b098a1b5f7898ea9629" name="libblkid" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="04ab2623f66ca0672e77a55ffbf06d746ff74da4722f33370410bc0eda636fe8" name="libblkid-devel" arch="i686">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="dc0301d8a3f7df5d22d43f43197faa2bb0d8fe8196d4dd51562a3fb08ac4cc31" name="libblkid-devel" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="f90879959f876d2df1f62b4bec1ed1687d681f982a9be2f976e6d6eba3c7bd83" name="libcurl" arch="i686">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="2ead6aebf347848ee54d874062b1d72e8b5ba60f352f0f27e91b48f3d2664ea2" name="libcurl" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="c77865a69db535977586fc71c1814a9aef708b3a89a108a646faadfe38b608d1" name="libcurl-devel" arch="i686">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="cfb7e227c240db4335389e99c6cc848d4d5b5562358cb6bc1a7bbc31c530681b" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="5ad0e8f0fa15cdfab98ce067ed80a3514c1bb28a001290302b51252b4a67c1d9" name="libdb" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="ef1058329b8f8939d09cfe9d4a35a09c835b7c7d766161e7fb317497981abe2d" name="libdb" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="f3bf73a16c29aeceba0f191e94f3fd3e25ba08a029f862f49e078221253c3a94" name="libdb-cxx" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="62dd7e9588d7f2ad52c50449bcdfe4d01dbc4bf5874bb019bf20162fbda9092a" name="libdb-cxx" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="b391241138e4941f68e57a84b127e116b0bc93b98624e3b86efed9700c99b962" name="libdb-cxx-devel" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="9e15668135913517917598b5083b74c1fecdd1dd6d7a50c8d5086f31a7cd1d49" name="libdb-cxx-devel" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="0013170830c3953b633597cf4b97f9bc601db1b4722aa623a52989508655c7b9" name="libdb-devel" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="6c2d6f35f107e08d115322f0060ffad37e373c16d1d2a60e70046b49cd145273" name="libdb-devel" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="f52b21a4f4c354e7c0366ec1e6614607a48eb14644b31c16d75626188e5aa853" name="libdb-devel-doc" arch="noarch">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="8fa89f1cfa9aad2452892251a39495da42685e61deb4ff68367874b66b739c33" name="libdb-devel-static" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="33df678077aae33942a7619c0776dff987adec884595daca2826a32534163292" name="libdb-devel-static" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="4dec046566887bf86f711b3dcc4d02e9bcdfa647af0ffd6403a947ce87e6a5aa" name="libdb-java" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="f6a464956fb5e3392b3597897c6601bf964518346eca166da9488c9a16da6e1e" name="libdb-java" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="3169bd8d2b4059b89da32286ba817464c0b2b960d8550a20dccc009f81a808e8" name="libdb-java-devel" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="e019b59ceba1565c3f7c19dd30027ccf6f9c6877748c1ddd4ff9b60004039481" name="libdb-java-devel" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="06e6f6a42d076f75f3ec52add923350486d2502349a501ed35e8258c6746976e" name="libdb-sql" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="1b87acacc3c7c3186ecc7d34a453657fe4cc71b9f1a4064617364b78f19945a8" name="libdb-sql" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="4db3e046a3ebb4f48317acafef53c9161d82faae822fc3cb5ae5070dacbe3d01" name="libdb-sql-devel" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="949f50f0cfdb96e3b00dde25b5584b2f72347a66c8b4554667a874c6cc55fee5" name="libdb-sql-devel" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="58018590b391a056cdc53e3f5ab75d2cceb4aa8162a9c9432c9a7e2f6ab27469" name="libdb-tcl" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="1dce3613130a96625abe92a854a18ad1009bf7a6bf02d1f307b24cb6afa6e1cb" name="libdb-tcl" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="81b77309c047007d8f0d9c6ca6dfcd849389f67afc385791d95f0aac3748d490" name="libdb-tcl-devel" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="c3d8de4f7c80220b0037d9521a225258e7ab4e9191edbe9b1a02af152260feda" name="libdb-tcl-devel" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="625ca3db5ba1975befdceb67afb0773607c3fe25a0a619c0d18f7239dd5d8dae" name="libdb-utils" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="2157ad133d7f9e7bd625adf15ef7e7b9e4f6728fbfef71fee968bebaf9125f5c" name="libdmmp" arch="i686">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="83aa8834b84d795b7c6cea13afd4e0024259bc61b950735437553002a5066ed5" name="libdmmp" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="fc74ff2b81c7e3d29db83971b8a856c0e07a5aff8312d97f492af0bfa47ba564" name="libdmmp-devel" arch="i686">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="3500f8809682d176c53511b3e75aa342a59f30c9a7b457dcadfa1014e26818f4" name="libdmmp-devel" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="eae941d61ed1eed12e6006e13942655d687d32d9b708a5c6fdd865af407ec78c" name="libev" arch="i686">
  <version epoch="0" ver="4.15" rel="7.el7"/>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.11-1" date="1348833600">- Update to 4.11</changelog>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.11-2" date="1360324800">- Make a patch out of Michal's pkgconfig support.
- Modernize the configure.ac file for Automake &gt;= 1.13.
- Respect the Fedora CFLAGS
  https://bugzilla.redhat.com/show_bug.cgi?id=908096</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 4.11-3" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 4.15-1" date="1378641600">- Update to 4.15 (rhbz 987489)
- Fix dates in spec</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 4.15-2" date="1378641601">- Bump (koji was broken)</changelog>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.15-3" date="1385467200">- Get the package closer to what upstream intended:
  - Do not move the headers into a subfolder of /usr/include
  - Make a libev-libevent-devel subpackage to contain the libevent
    compatibility header, so that only this subpackage conflicts with
    libevent-devel, not all of libev-devel
  - Drop the pkgconfig file, as upstream rejected it several times already.</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-4" date="1397736000">- Rebuilt for RHEL-7</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-5" date="1439899200">- Resolves: rhbz#1254667 - increment release tag to ship devel</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-6" date="1439899201">- update compiler flag to get rid of strict-aliasing warning</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 4.15-7" date="1492516800">- Bump and build for all architectures</changelog>
</package>
<package pkgid="c00de22f93ac3e51c08af1724f684541172232b72a0e48eecc1789b7ca9f5cbc" name="libev" arch="x86_64">
  <version epoch="0" ver="4.15" rel="7.el7"/>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.11-1" date="1348833600">- Update to 4.11</changelog>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.11-2" date="1360324800">- Make a patch out of Michal's pkgconfig support.
- Modernize the configure.ac file for Automake &gt;= 1.13.
- Respect the Fedora CFLAGS
  https://bugzilla.redhat.com/show_bug.cgi?id=908096</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 4.11-3" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 4.15-1" date="1378641600">- Update to 4.15 (rhbz 987489)
- Fix dates in spec</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 4.15-2" date="1378641601">- Bump (koji was broken)</changelog>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.15-3" date="1385467200">- Get the package closer to what upstream intended:
  - Do not move the headers into a subfolder of /usr/include
  - Make a libev-libevent-devel subpackage to contain the libevent
    compatibility header, so that only this subpackage conflicts with
    libevent-devel, not all of libev-devel
  - Drop the pkgconfig file, as upstream rejected it several times already.</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-4" date="1397736000">- Rebuilt for RHEL-7</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-5" date="1439899200">- Resolves: rhbz#1254667 - increment release tag to ship devel</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-6" date="1439899201">- update compiler flag to get rid of strict-aliasing warning</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 4.15-7" date="1492516800">- Bump and build for all architectures</changelog>
</package>
<package pkgid="2505e71aad2fd734c8947203ed96e0ca88975a35f38f0087c4200d91ebbb55ba" name="libev-devel" arch="i686">
  <version epoch="0" ver="4.15" rel="7.el7"/>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.11-1" date="1348833600">- Update to 4.11</changelog>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.11-2" date="1360324800">- Make a patch out of Michal's pkgconfig support.
- Modernize the configure.ac file for Automake &gt;= 1.13.
- Respect the Fedora CFLAGS
  https://bugzilla.redhat.com/show_bug.cgi?id=908096</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 4.11-3" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 4.15-1" date="1378641600">- Update to 4.15 (rhbz 987489)
- Fix dates in spec</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 4.15-2" date="1378641601">- Bump (koji was broken)</changelog>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.15-3" date="1385467200">- Get the package closer to what upstream intended:
  - Do not move the headers into a subfolder of /usr/include
  - Make a libev-libevent-devel subpackage to contain the libevent
    compatibility header, so that only this subpackage conflicts with
    libevent-devel, not all of libev-devel
  - Drop the pkgconfig file, as upstream rejected it several times already.</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-4" date="1397736000">- Rebuilt for RHEL-7</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-5" date="1439899200">- Resolves: rhbz#1254667 - increment release tag to ship devel</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-6" date="1439899201">- update compiler flag to get rid of strict-aliasing warning</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 4.15-7" date="1492516800">- Bump and build for all architectures</changelog>
</package>
<package pkgid="aebe41552be404a35379baff20e94644742739b8b162d75a9ab35329a5519639" name="libev-devel" arch="x86_64">
  <version epoch="0" ver="4.15" rel="7.el7"/>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.11-1" date="1348833600">- Update to 4.11</changelog>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.11-2" date="1360324800">- Make a patch out of Michal's pkgconfig support.
- Modernize the configure.ac file for Automake &gt;= 1.13.
- Respect the Fedora CFLAGS
  https://bugzilla.redhat.com/show_bug.cgi?id=908096</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 4.11-3" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 4.15-1" date="1378641600">- Update to 4.15 (rhbz 987489)
- Fix dates in spec</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 4.15-2" date="1378641601">- Bump (koji was broken)</changelog>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.15-3" date="1385467200">- Get the package closer to what upstream intended:
  - Do not move the headers into a subfolder of /usr/include
  - Make a libev-libevent-devel subpackage to contain the libevent
    compatibility header, so that only this subpackage conflicts with
    libevent-devel, not all of libev-devel
  - Drop the pkgconfig file, as upstream rejected it several times already.</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-4" date="1397736000">- Rebuilt for RHEL-7</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-5" date="1439899200">- Resolves: rhbz#1254667 - increment release tag to ship devel</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-6" date="1439899201">- update compiler flag to get rid of strict-aliasing warning</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 4.15-7" date="1492516800">- Bump and build for all architectures</changelog>
</package>
<package pkgid="36b3c11ba3571bf7bfded521846798a2c5b307c52e51fdf4faba58c25b721512" name="libev-libevent-devel" arch="i686">
  <version epoch="0" ver="4.15" rel="7.el7"/>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.11-1" date="1348833600">- Update to 4.11</changelog>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.11-2" date="1360324800">- Make a patch out of Michal's pkgconfig support.
- Modernize the configure.ac file for Automake &gt;= 1.13.
- Respect the Fedora CFLAGS
  https://bugzilla.redhat.com/show_bug.cgi?id=908096</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 4.11-3" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 4.15-1" date="1378641600">- Update to 4.15 (rhbz 987489)
- Fix dates in spec</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 4.15-2" date="1378641601">- Bump (koji was broken)</changelog>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.15-3" date="1385467200">- Get the package closer to what upstream intended:
  - Do not move the headers into a subfolder of /usr/include
  - Make a libev-libevent-devel subpackage to contain the libevent
    compatibility header, so that only this subpackage conflicts with
    libevent-devel, not all of libev-devel
  - Drop the pkgconfig file, as upstream rejected it several times already.</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-4" date="1397736000">- Rebuilt for RHEL-7</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-5" date="1439899200">- Resolves: rhbz#1254667 - increment release tag to ship devel</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-6" date="1439899201">- update compiler flag to get rid of strict-aliasing warning</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 4.15-7" date="1492516800">- Bump and build for all architectures</changelog>
</package>
<package pkgid="8d6cdb5004335bb373469ab23c2e99e4503d9ff06fd7f201dcf884afbeaf1b27" name="libev-libevent-devel" arch="x86_64">
  <version epoch="0" ver="4.15" rel="7.el7"/>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.11-1" date="1348833600">- Update to 4.11</changelog>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.11-2" date="1360324800">- Make a patch out of Michal's pkgconfig support.
- Modernize the configure.ac file for Automake &gt;= 1.13.
- Respect the Fedora CFLAGS
  https://bugzilla.redhat.com/show_bug.cgi?id=908096</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 4.11-3" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 4.15-1" date="1378641600">- Update to 4.15 (rhbz 987489)
- Fix dates in spec</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 4.15-2" date="1378641601">- Bump (koji was broken)</changelog>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.15-3" date="1385467200">- Get the package closer to what upstream intended:
  - Do not move the headers into a subfolder of /usr/include
  - Make a libev-libevent-devel subpackage to contain the libevent
    compatibility header, so that only this subpackage conflicts with
    libevent-devel, not all of libev-devel
  - Drop the pkgconfig file, as upstream rejected it several times already.</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-4" date="1397736000">- Rebuilt for RHEL-7</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-5" date="1439899200">- Resolves: rhbz#1254667 - increment release tag to ship devel</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-6" date="1439899201">- update compiler flag to get rid of strict-aliasing warning</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 4.15-7" date="1492516800">- Bump and build for all architectures</changelog>
</package>
<package pkgid="47b3521dab434ff04ef439ab51418b809970f7db40efe6092d601c70af9ea16c" name="libev-source" arch="noarch">
  <version epoch="0" ver="4.15" rel="7.el7"/>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.11-1" date="1348833600">- Update to 4.11</changelog>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.11-2" date="1360324800">- Make a patch out of Michal's pkgconfig support.
- Modernize the configure.ac file for Automake &gt;= 1.13.
- Respect the Fedora CFLAGS
  https://bugzilla.redhat.com/show_bug.cgi?id=908096</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 4.11-3" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 4.15-1" date="1378641600">- Update to 4.15 (rhbz 987489)
- Fix dates in spec</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 4.15-2" date="1378641601">- Bump (koji was broken)</changelog>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.15-3" date="1385467200">- Get the package closer to what upstream intended:
  - Do not move the headers into a subfolder of /usr/include
  - Make a libev-libevent-devel subpackage to contain the libevent
    compatibility header, so that only this subpackage conflicts with
    libevent-devel, not all of libev-devel
  - Drop the pkgconfig file, as upstream rejected it several times already.</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-4" date="1397736000">- Rebuilt for RHEL-7</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-5" date="1439899200">- Resolves: rhbz#1254667 - increment release tag to ship devel</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-6" date="1439899201">- update compiler flag to get rid of strict-aliasing warning</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 4.15-7" date="1492516800">- Bump and build for all architectures</changelog>
</package>
<package pkgid="53fab858314a1f63e6fa20be9a59165c610f6fae71b9df6a2d9449a133ca8822" name="libgcab1" arch="i686">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="b82f55653726a6146b1daac98166ce127b59044f22f6cd4a7a45fce6c6971ccb" name="libgcab1" arch="x86_64">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="56fa2bac9d626697fa344821031bef2e2b0733425dd180097a98a5b4c65e5314" name="libgcab1-devel" arch="i686">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="872512751746730704452cb360432ad49a269b456df07a27df6452915745f98e" name="libgcab1-devel" arch="x86_64">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="8266ca66edd5ad303750b27cecafd52470dda7d0f96adc99536c3857d5c2c06b" name="libgcc" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="fe09fea3eaab95d14cdc3b03e866b7f2b74546714756ef8bcfebf75469fb2f27" name="libgcc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="8e8d433245d8f50acd4a369b59c618f47db71d592a1340a66e675ccb2afbc886" name="libgcc" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="6c62d68ba2996b9389f81843dfb9df33935d0d7a7c40ad5aac2ff42b240f05a0" name="libgcc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="ef06da3a84243726f702f8fc4197a3973b8b4f7582dd83068f85418052cff8c0" name="libgfortran" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="76228e7a234c3d40f27e1a7ebb74979d377d1f030da4925d8eb198dc8a1b8265" name="libgfortran" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="67c051789f2d80d706f5735421c5b2650d5f9cdedf7e0376fe709692b1f91cdc" name="libgfortran" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="53f0b33268dfd23c39f57bcd21c5a48ac28c1a0c0d6b64b051224fb3d9a2be80" name="libgfortran" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="15b789e9f1b3b3591427b27898741bc84df2de05485aad0ae6addf87c876128c" name="libgfortran-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="bfd480417b4a5dc1e9ecec92825f3b0ffbb3752aeb172390405eee2ec3e4a28b" name="libgfortran-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="9624cf8c46f94ea43c800efd5380511a48fdc198d553b571e6c85fcf577a343f" name="libgfortran-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="c0d8f743ef6e3401866570e664fb59a441442f6c3daedfe0cbc00f9db18cabe5" name="libgfortran-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="afaca7b652b0bfcd01993050e81f0e0e59ee02dfc28e8a33c8eb4bb3a5676198" name="libgnat" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="27c8ea99265954e58e883ec740f5c3518541a9c14f2b7a1f218562a4f9e88a62" name="libgnat" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="9769f064e34eb3247f32d1bceb734e1453f113234874d9f363ef6ec1aeb8b404" name="libgnat" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="8f268b29060119f8f031d3989a29e667928c2512632e6762d8e6f5fedee97436" name="libgnat" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="4beb3eca8fc4dc04f9ddeb553b5c96ed3e65455b4c38c99ae87b7fbf6048b558" name="libgnat-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="8f9636bd77cc3db4e3bfd64b293b87790c5b25b2e7f733cf21b304bc5fe622e0" name="libgnat-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="8cef18c617e8af22406bd44ffd9ec9de3a5d4f3185df232d0f71411c8e151033" name="libgnat-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="5c7a917cce534f7081749bde0458b8be68a2f9301c1fa5bad447ba3c35510961" name="libgnat-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="05303d52691729c4d7306bd61fc3814eaaa55abff5d734c8514c2105ce3dc557" name="libgnat-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="dd718cc8efad825d4facdd5d5a5b9fcdc20b6338a07831c0ace5524efd9da15f" name="libgnat-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="0b4ac284d4a06e32103ca0e05db0aec726d2002708b1ddd4a6ed4ed81c109fca" name="libgnat-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="bedfbba94d1c76a4318e6b61885b129aa270c47e37815b70559845efc344c6d5" name="libgnat-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="4ed0c64fc9006d1aa76e2869a87d5d3b10097e787ade830ebd45b3ac8a116667" name="libgo" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="db5940f3117758f55eee7774ee59f430e1b1fb9c619915763d5df4dfdd2de9b1" name="libgo" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="6d6716fef23d89994f11e6cdd04812ec770d113e37a3f919054d0824b802d38d" name="libgo" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="44c1ae499ec905df0957a00dcba929f8d57559f832e47b1ab68e879e5611171d" name="libgo" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="00e5a55ba9cd731eba7c3d3932f28f45d14b92ff2b2cdae2fea40bbac8576cb6" name="libgo-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="a48d2c2d348577b6e8275b4a6bdd1ba41011136b815041d0a2b6f3da228e53cb" name="libgo-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="088be875c5efa9cd6c93c37ebba7dc86b91eef4d49cfdf1a194fbca0cde2dd30" name="libgo-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="d831e0dd66fc397d01bf56bdb0bf89a138b7d62e8eaf6a3ff92e76a1c922591a" name="libgo-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="f21d2d835d5a6e7485b7fa20563543b24884fe34128489868c5f84d35297f996" name="libgo-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="20ea35065dfdf617233c943b26463a183d89c87f2bf73c7c9caca7a6d1a6ff68" name="libgo-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="f8790cf00fdd1e64f546bee0b7e6fff923d9b4d90cd92ba7597248ef71975136" name="libgo-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="d28bb140cbe17f29ccca34aec40d2ee319ff2b4211c69ae36cb55e9b08c68652" name="libgo-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="7bcdeb40b0e96b08094124a66a40df7c5bfecca0b5a2d0ca4d738b886223d701" name="libgomp" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="71725a8d34d9e6a2bd14f2ccb852954b5fd49a1b05aac36602225cdc599bd187" name="libgomp" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="f6a7efc7795d4ccad42871ce7e292006e752d765c85495060c7f0624bc8ad536" name="libgomp" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="0e2c88366daed96d710b68916fdf5e3c24d3d88024389fe2620631aaef85f4b4" name="libgomp" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="16f3efc7dda4cccb926c16dc9ae4506f1c55ea5c7be2e550d0f679c37f93f63f" name="libgudev1" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="a7012ad06249d587ca17b595e99fa49543217544ccf6af9b455520ea3fb0b3bb" name="libgudev1" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="a9f4483adbf8a193aa186f56b0ed613ec3202cc054adac89a9d4dbf7c8c19dcd" name="libgudev1" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="23037be306ea3188aef2d402e88794b59634ad75e6a26f91a347fa38ea0a104b" name="libgudev1" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="87fc97755f16d03bb6556b45d3c7fc7a9bb82f80f18f2531f9f2c20eedea6e66" name="libgudev1" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="c3faaa1240663a7259856637d930810b364b4da0e79e5acdf5382ca7eca60cfa" name="libgudev1" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="ffdce941d25ebb3fffe0299b2caf8417092f30bacd0a78962e9fe64617818729" name="libgudev1" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="072fbced4f38da42e6dfc8c000ff58cdf21c2c406e2361e4afa997961621dce2" name="libgudev1" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="8704269be9e594f89e136fca16430b76b95cfe41b74bcf79b9a285cb9de81e4e" name="libgudev1" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="0f3ca0e29ef9644058bf98f34fca926fe38ee97958514dcad0006803a1cae4c2" name="libgudev1" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="036fd8defbbcd504e534faa6ae1b080fee405019b80c1067fa2d19a8e5c9bce9" name="libgudev1-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="7e328992fbbabcafa3833f62f1e6678f3b64f150e1708e4c3382d0c58199eea4" name="libgudev1-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="d4dd8228a76f42905059e73a915074c467e8ac9687580535e845d6e9ade42202" name="libgudev1-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="988fb261405a7d4cb81db4e67e773586e16630f03ee49421c3bcef7187729782" name="libgudev1-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="89c49727125888531ca1d7cbb3cf8a8eaa4b958b785fa52c0817253d81cc445c" name="libgudev1-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="55e71da7772f50994bb6a724585d35faf73bad82f31c0b5c4afabc2003cc1d13" name="libgudev1-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="91ae4098c59a57ceb73ebfa1baaddd33abfb26ac13a7850dc06e816b743b8fdb" name="libgudev1-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="8934771e2c646522c2dfbaafb66692d3a8e33dfd66eeef993250fd5281354e1f" name="libgudev1-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="000cca788a68cd79760637d0861abb74597106a8b37d813c70b64a827f77caa7" name="libgudev1-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="ecfd42b22f815e138c3ab49a01b546c8859f087284bb0bb3b651b0e4502d7c2f" name="libgudev1-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="63876529f3172a0341ce8444956fd8618574bae90b4d69782a14a3d2884d1c08" name="libguestfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="3b1a9ce2991244d6bc8f851f2960ea96b30e20b30da4dbb43e943fa89c9b28c2" name="libguestfs-bash-completion" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="9251d32b53f09af33f8b70be73a9b48c7b30f0828d461ffb7f9b873bcba39b51" name="libguestfs-benchmarking" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="81ae93c5907d6207f8412d969427f551905db329d09dcc820f69c057a32484b7" name="libguestfs-devel" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="e9c7229665345ba712dc1076072072a05347814701e8a3592739113033b8135c" name="libguestfs-gfs2" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="8e6997065193d1255af723ee09be3ec90c1b378dbe6bcb0115f901685876135a" name="libguestfs-gobject" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="5d0164ff2797d2256d21ffa377867fbde933be875439d0ce771b49e32df41746" name="libguestfs-gobject-devel" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="0a550a6241b23fbbef7ec70f5244ed43f7168640f656575fa840e52247e9de9b" name="libguestfs-gobject-doc" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="100b9570af4af5652c642bf3ff8777149b37414ea506a9a681ee142703573a1b" name="libguestfs-inspect-icons" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="ef1b5a5c5f9d5162f4269c50097246f45ffa938646e4ed15eb62b8ed49ddc380" name="libguestfs-java" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="a1c4cf719671fe6fe199299dbe4a548bc9a3915576635ef51b3748a1de9c899a" name="libguestfs-java-devel" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="0842df82a36a42bf722aa758dcfc609c279889f3ce8ff74eb9e7eacd35ad28fa" name="libguestfs-javadoc" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="9c89e1e07cfd4a3c5e80af91ea58c37e6b503c864130cc62e1b84804d7b621a2" name="libguestfs-man-pages-ja" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="f9f9289366911d2234eafd0f0736b88328a3b5ac82b6ebf6c46f0fa1e2e99a68" name="libguestfs-man-pages-uk" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="cdf00851b394606396b241308fb5b055386fa238f7e933df949a0c24483b1e36" name="libguestfs-rescue" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="3d720bd39055e25f83aa4d37c87e7755c0cabd9860278aee4a9929e101217f7d" name="libguestfs-rsync" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="b23878a032251fd01cd561591bbe4d56832f3a953430f9c4c9ba44e26b98fd43" name="libguestfs-tools" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="0ab41e271f33514fa08a6e7b4b1c7e0163189dd7af3e8e3be0f10b68782b1c2c" name="libguestfs-tools-c" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="9f4e696b9e18ffb75245fa5216e57da8dd1820941619462d65aeafe7b5f0c68b" name="libguestfs-xfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="f79a4ef36755bb06c8dbb4ad5681c7a53ab2874f5bbb4c6e4354456e1c38cbbf" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="16ae6ead8aa481bf4d15fd942675c8b01016589d7027c2d7edcc07513f0027b0" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="67ddb3a1ff4ce70c0a639121d47f29b7fcc71b5b70253131381f6dae76b84c8e" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="36e3fece64278f7fdc81cdf10bf778535c6c38d7e1e02f9b6d15a794db7ad5d6" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="d967b9dda2cb451a4ac24b5a8d3c0a1447a5073a20f87b2b5ab81663220050e6" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="d946ab9b4994fc7b79d176d87daeff989855fd7e54031004c8718d9d4f85c315" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="88d9f44267cbd24ea99522d1321b92d7b70842ff122402b051a3adef079153bb" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="cf1830dc4bc267eacc2ee243bdf6fde66cee2603a5af725e50e19df38b95ac52" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="1e3575bf6077c99392eb9a5acf77a1aacd1db15a6c891f6c02290d981873cdfe" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="95435e7ec14d14edb46a5bd442b395864f09cb8b50817c7666a0e3c8d0fdc5fb" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="905e5d598a2b9f0fe70fb7d02479c15b1b41d9547b975fecb08d23ea3fb5d4c6" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="cace3af6ff3dd128d88cdf5ce2a4039f11d55f8588d546c512e851886e4afb6b" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="6cb654b7e25fa49810c894f4724e59b270e738cb2459ab985134a10fb61d467d" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="e4162ca40859d538394540e483108f1e4b810cf9925fad1c66272d8ba5cc5171" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="551fe285f56b7a67e6f4d7c71c3caed3a84a0db906c33403942889dc931ac9e9" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="bba15bd1441865de19cbe53b754ca3f87483e1f84b4926b71f6f029a8d509f24" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="d573fde7b1fff82e8d3871c5e098d09e6501f700e5412df2ff3aa802058c91c6" name="libitm" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="a1da8f53fde91e4ae56579277aeeb8f7f0d07623433a66a2bd8c91f2e80a7bff" name="libitm" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="ffad26ac6897536fc72a0ec19942369e7b4d6fa149a2d06ccfb4b266ccfa70cc" name="libitm" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="bf61e3f1d05770f2d4d3cbf8e3131e92cad6099e1ebef9d1a6eb48d3d781c386" name="libitm" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="0b9a7aaa1d9275c765ebd7fc2b75624356edbc6bd05bd02222e2903b08abbbbd" name="libitm-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="e70386cf1c46fe8fd180faf2297e0194d98b0abb245d80c5565a74689a571943" name="libitm-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="fa7e438ea79c232fc3e1ad53a56ae771fc3e5786054fb2d730079d35261c02d1" name="libitm-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="1d5cb4968d0697e0a7df08c98aa73bd801f3d742ad1f6bfa8e63e22cf6b44657" name="libitm-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="7623a067fba10534f3b88bf3a4ce3fcc017adcdeec360e53c652f34c521ca8fa" name="libitm-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="2c7e54a1641522e651b6a76c98792d0ea5ef1f65f761073935597e05830700d1" name="libitm-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="a0adadbaa4def251e802bc00db33b7e150c3d5dc5ba56583eed68a3ea6265c06" name="libitm-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="7661d4289fc3b93c2da2aaa6a8e3b8e499dc0d3b8ffc524ecb5b72d39d144cc2" name="libitm-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="321c676b37e766bd13a438ee7e0db95b058cf73acffda108275c83947758b122" name="liblouis" arch="i686">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="d6416f92e5fb53fb91151224726eb0b13d0352832ab55f69190270ed82ac56f1" name="liblouis" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="15a047ef443b6db532b46cdddc278f5475fe8dc7a078ebf317b62399e6bc5f39" name="liblouis" arch="i686">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="d20a07691fc6ab02f0d9590d13e036eaf6b91186087591767438c81a3d87c306" name="liblouis" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="83cc2549971d235e4e25e8899bdf7f3bcebe04b8690a49bd890bb7c2ae047832" name="liblouis-devel" arch="i686">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="391a38501a8c68fb3dc51504b963a236c70d9dca6fe63937587650300d964316" name="liblouis-devel" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="faddd5b34d959cc8c6d92aeb7f201d9d71ab8496f27b6694fbb0d3002f48a280" name="liblouis-devel" arch="i686">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="803272ef5d14824c9e3b28b055905227b55a795d8a54e6ceaf197ca71c938575" name="liblouis-devel" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="d368a800a404eac5a8a10ea0e7eec9d098f8a430af59743da1ae69ccdac6ffc1" name="liblouis-doc" arch="noarch">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="ba92c7093a58a17b215f8fb3ef5989a0be168243e3e5345b3dbbc4b2f93ce7be" name="liblouis-doc" arch="noarch">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="67e2e21c838afa49b5fc6395a36196b7586bb1b9a1f4323a9e22427926fb0c74" name="liblouis-python" arch="noarch">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="b8b3a3e2710426c50f118f593926e7f9b171041d03cf3f3bf6cacf843ef6fdac" name="liblouis-python" arch="noarch">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="4cc49d466b5714f9e4a851253ebb1cf0f5d224c899d304b000be42dc9fefad58" name="liblouis-utils" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="1cfd9da81d55d7d46143c227f78e96b65169357eff5809bad35d6a49ec7869f1" name="liblouis-utils" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="3d6ee4a9df95dac42158c7a624ef9a58858da34cb3faa2d17420215ed7fa1ae9" name="libmount" arch="i686">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="6be70a56064494171ec48a24dd2a91412eb8adcd3d08d8870e41f566855d66f1" name="libmount" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="17221c068f481d0d145f9dc6949edfc5cea200d5da0d7925b06c35607ae8594c" name="libmount-devel" arch="i686">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="caaa5289db40f094ec4994cefedb502d2ba6a1f639db10f3e9560bcf7ef6ec4e" name="libmount-devel" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="afa3072206a8b049284d782f5f47a09a9a6b77d93d4786cc04afbafe818ccce5" name="libmudflap" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="3d7bf775fd9f53d04fabfe80edd204d04ea30da901241d7846a0ef85e80841d4" name="libmudflap" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="a864f880ca2d5c521c99eb2fec4c24087bec86e31c0445142ad2706ca8fe3b2f" name="libmudflap" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="256e00f2a9e11211979041cb547e3d4a5a8d067f2276f0de01629cbddb198322" name="libmudflap" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="d0f36bc2bc0a29babc6a8d82bf5d71ecbbcfc554320a7a2b353749c4e2d93e32" name="libmudflap-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="986e6a35075913993cce4500af0997881a11fcd65406f29106c0d13dc981f39f" name="libmudflap-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="3baaf189d4fb7e387f8f1110a91eebe4493342fe547061c46f24c2964b2f1a58" name="libmudflap-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="2a321f24b0ec8bb92984dd49605b00096cf13833c67dcd05d4c56fe19ef02c50" name="libmudflap-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="f0118f777f3e40a5d5d0177fa3422e3cc83e121eccafb28d5df656b64525cf66" name="libmudflap-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="3547bbdb802dc36005fc0102c877a4454b5ead74885281393fd56f80345b8675" name="libmudflap-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="eee021f2603146266d09918c64ad943b94e530b5b4df546b7371664c51e8a55e" name="libmudflap-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="46a9288927698096d6baa7dba6173558308f49ac4f9facf2b330a4fdb034c599" name="libmudflap-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="42206d5d522809622c4e5ddec64959ef9f6f8ac4092776c895e9a06ac300be10" name="libobjc" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="58f6b069b87b992510d51ef00e3c391da292c784888ceb4e2454c620180d1128" name="libobjc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="88af819241cb5a2df458faedccbd1f9da7e4ebe069e87d2bda289adebcda8398" name="libobjc" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="1027d60dadc426ed7501cc342ecbcd62b0392e05fc6e16bbbb34a63749480b10" name="libobjc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="2c74d7c0f88af3b09dee008ec405e39d682d846685660d078a9bf4a4b2bc3586" name="libpciaccess" arch="i686">
  <version epoch="0" ver="0.13.4" rel="3.1.el7_4"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13-2" date="1332936000">- libpciaccess-macros.patch: Fix out* macros again</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-1" date="1334059200">- libpciaccess 0.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.13.1-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-4.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-1" date="1432209600">- rebase libpciaccess 0.13.4</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-2" date="1432296000">- rebuild due to ppc64le relro issue</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 0.13.4-3" date="1479124800">- add support to ignore 32-bit domains (#1380184)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.13.4-3.1" date="1509019200">- Add support for 32-bit domains</changelog>
</package>
<package pkgid="b5430110aa33c6aade09d962236ce0b4351b04d783739965652323eaa1f7b2c8" name="libpciaccess" arch="x86_64">
  <version epoch="0" ver="0.13.4" rel="3.1.el7_4"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13-2" date="1332936000">- libpciaccess-macros.patch: Fix out* macros again</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-1" date="1334059200">- libpciaccess 0.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.13.1-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-4.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-1" date="1432209600">- rebase libpciaccess 0.13.4</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-2" date="1432296000">- rebuild due to ppc64le relro issue</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 0.13.4-3" date="1479124800">- add support to ignore 32-bit domains (#1380184)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.13.4-3.1" date="1509019200">- Add support for 32-bit domains</changelog>
</package>
<package pkgid="fa44f58f1be7dd9e2b059ec04448d09e79375d7f3dbe6e8d600765a6bee60618" name="libpciaccess-devel" arch="i686">
  <version epoch="0" ver="0.13.4" rel="3.1.el7_4"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13-2" date="1332936000">- libpciaccess-macros.patch: Fix out* macros again</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-1" date="1334059200">- libpciaccess 0.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.13.1-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-4.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-1" date="1432209600">- rebase libpciaccess 0.13.4</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-2" date="1432296000">- rebuild due to ppc64le relro issue</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 0.13.4-3" date="1479124800">- add support to ignore 32-bit domains (#1380184)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.13.4-3.1" date="1509019200">- Add support for 32-bit domains</changelog>
</package>
<package pkgid="2f68bbb111eab209aa70c5fcd5ac3d550b14c75098e8d385a29cbf95d5b202a2" name="libpciaccess-devel" arch="x86_64">
  <version epoch="0" ver="0.13.4" rel="3.1.el7_4"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13-2" date="1332936000">- libpciaccess-macros.patch: Fix out* macros again</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-1" date="1334059200">- libpciaccess 0.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.13.1-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-4.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-1" date="1432209600">- rebase libpciaccess 0.13.4</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-2" date="1432296000">- rebuild due to ppc64le relro issue</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 0.13.4-3" date="1479124800">- add support to ignore 32-bit domains (#1380184)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.13.4-3.1" date="1509019200">- Add support for 32-bit domains</changelog>
</package>
<package pkgid="9fd4b11d65352ba9200dfbf14ac463e1242810a977bb3b2ef87d21f7a21b9237" name="libquadmath" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="6351da1f7cbc180b62a4223d6ddc8a8065864f6fd1787a28deecfc7b0bf36350" name="libquadmath" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="e6b7f647b3552affeb18a8c9774036b608b1e11440a5cf05c7ab9bc51da413d0" name="libquadmath" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="48ef21010120fe80564ecd31e90dc20447fe7f5b5618ce1a7a2006462363a1d4" name="libquadmath" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="2f76bbe872140a0a9ee9cfefa889a2836579474c4ad56a618de26431a5a316cd" name="libquadmath-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="7ae2ea38c4f1d88988a2130b8a14f38eddf98b8a799ef83f2be5163c1d391857" name="libquadmath-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="30181baf6d9acffa51abd380a419e013ad9c1a909b7c27e186d6ee7c573198c9" name="libquadmath-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="a96ccbf06b6c4ec435cc3b754b80abadaa5a5e7c65214dff4ebdd94f1e54edda" name="libquadmath-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="37470296593e447597268515f09337e1c0e61c279bbe4686dd6f803c0c58e0e1" name="libquadmath-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="33747188d05ffa5e9579760761f23dab5b425585a6a8a07c376c5f05ffc0d074" name="libquadmath-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="9b65ef954de36ce62ea5dc6a3af793be05a0f635d502ebcb9ab8b51cdcf4d411" name="libquadmath-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="3bae0d5f2f598d92a37d415c6c5d5846d4b229ecde28d3466be6cd440d1633d7" name="libquadmath-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="2f8614717abb697c077bc0c34d341e1763b5472e4ffae88b8b4dfabce0abdf3d" name="libreoffice" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="97a5b2cf8ac8035538a5b11c590a0feca94ebf32c9b679635d6a64037e500dfa" name="libreoffice-base" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="8f11b4f8c4264b5957707b3d63c896526a19694cbec42da9d0c8064c2ee50d8d" name="libreoffice-bsh" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="0d6ddd0bff95ecb5e31a57afe07c3fdde14a738397c089757f5201ad1d71dd00" name="libreoffice-calc" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="d785056ad4233071abb56340fb77572ec75b4eb64586829bb338b3427674e590" name="libreoffice-core" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="cb948849e2354fc99886d834befd6598a640ffa61fd4468469147af946ff30e6" name="libreoffice-draw" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6bdec098db5e7f5313e35cfa83f84279c9d4b689b5a5cb93ca6db0bd39dcdd94" name="libreoffice-emailmerge" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="4c5f97dd54375ad66954a21c983421171222fe648ca1132bbba92a58a6d23357" name="libreoffice-filters" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="444c869f378519e7b016bb613247b929a42aaf35d634adf965d36507643fd19a" name="libreoffice-gdb-debug-support" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b33231e52fed5663ac540090b757eeefff9df1f5167d87556b895a9476a52b4e" name="libreoffice-glade" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="739cb88666834d885810e40249b2b8848baa636fa58ab13283e69c33d5fa3a69" name="libreoffice-graphicfilter" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1666a653a6924e73f31c122bd42a001eb10af4ae8f6f0216d4e5f5e15936385d" name="libreoffice-impress" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="14d17a5800465d20f6da0469ef012b856d2022d83ceb75a6b5c432d85794d47f" name="libreoffice-langpack-af" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="9e1b396cfb692cb490678932077b315658f818c5387f3c013cb574b9f178b152" name="libreoffice-langpack-ar" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="641103412ab6c9a11e973858c3e490b5522d967101112017540c28eb7ce1494d" name="libreoffice-langpack-as" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="bfa3621209987096db8646d6a0aff0e4a0eb572ea6dfb8e252c316de270aa490" name="libreoffice-langpack-bg" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="68f28dbca71170db0db8c0bad0efed8f2944720bb6800a2436f7bd54e347ddef" name="libreoffice-langpack-bn" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="eaf3a9b54a67b589b6bb1eb04859b2f43e9255db97801ab38f43e5787bcb882f" name="libreoffice-langpack-br" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="e3b9ccadcdb17a7ff21f848a5d3d1cb5c005f0f3ee0daff8df895213f706473a" name="libreoffice-langpack-ca" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="f7b1adbc80260d79e07bffb5174626aaa6309910b814a58f8d7836694e9cefd4" name="libreoffice-langpack-cs" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="4a045414c894a531fbad55d7f55a6f223f97c829cc5df0d2824735a8428e24af" name="libreoffice-langpack-cy" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="bb8c8e20fc5641e6c750b0e3f964dd77e85d2210fda910fa3867d16fab5e36f3" name="libreoffice-langpack-da" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="11aefba8dc2d0abe66b4408ba6958f51a8e42e0db0616e333288854e1fc15f8d" name="libreoffice-langpack-de" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="27734569c7db5713992e3fdfb4aecdc5871c72191f40331e9e51bef2d4508017" name="libreoffice-langpack-dz" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="005e7f9ece160bf7208585f5801a97fa6caa54a5e5263af0532c71dae32558e5" name="libreoffice-langpack-el" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="18c3f709657e2554d5b58b246a6e2e01a5397094220237eba8b9f77f25368ccb" name="libreoffice-langpack-en" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="04b2cbd34137564bddc31df21f79e9fa87203cf61a117c23410ab5c1bf3a3f83" name="libreoffice-langpack-es" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="45db519f9edbeba7e9fe5c5c11df34672d3f22cb2f7e660a5e80819b85757040" name="libreoffice-langpack-et" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6baf1a206df524908cea0dd2800289e81faf1acbf14dc19e066674d4b46b560c" name="libreoffice-langpack-eu" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ecbab5e2047f3a4896a62fec97b28608bd76955ef0c4a4c2c935a98b8bf21900" name="libreoffice-langpack-fa" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="c2e124a36d6b5297760ed3e40e2c64e80ff209ec164932f7a9fe10bda2487119" name="libreoffice-langpack-fi" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="9bb360bb79c6258ae630f6b56dcb464dc86de981247002ae825c77abf193ddae" name="libreoffice-langpack-fr" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="04c5c1d2db12574917e2b578df2bb055c79343d5148d18d24893d8bb9b4ee3a8" name="libreoffice-langpack-ga" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1391c24d37d45b55b97e97d7f4c4c8f6b4ff97d136b7e5e184208a73792f9997" name="libreoffice-langpack-gl" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="96203d2642d228a0de0ecfaf54b3c3181c412a05d63c799f5918b54629de219b" name="libreoffice-langpack-gu" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="2020c0bebe88069420dde3ead5f3c2d3dde19c300e6bff3d80737e3a7208e27d" name="libreoffice-langpack-he" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="0aabcf7b0b0d13fd62b7e53d8771f6c4c1ce9c898949f8113e95c62de41dc1e0" name="libreoffice-langpack-hi" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5af8b5a870d6f83bad1e4034ea0c098f690a0f50f0d6a0d6b6b7c5dad84464f5" name="libreoffice-langpack-hr" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1590913308496afe044bf6e177d8a5059c8aef1060d366321266fa203e393a70" name="libreoffice-langpack-hu" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a98be5671c38d4f6aa20c1fe97afe3987083749f305c8ae1c24718747ce73fb9" name="libreoffice-langpack-it" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b317171a4ff37a99b2b7a83e4fa14187fb9852572a994b1a1aa698e9849341ab" name="libreoffice-langpack-ja" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a502fa7ab15b40f052f8542e8e31e9982b7bf4b0a9c55105ed36c357948df26d" name="libreoffice-langpack-kk" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6742d7dc61824fe1e9419f503a235656d518e22ed9ecb689568ffc318b6e1335" name="libreoffice-langpack-kn" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="2b48063ef312a461d71dbaa188dde0bf4e2f1dc928e45e6a9a314cafe79b4318" name="libreoffice-langpack-ko" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="fdd529d38bba22b0ef508d43ba18766aa5ec86757ed6dfdc023427b9956b4416" name="libreoffice-langpack-lt" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5129b74f6c1195a5833b7428239c336033928d8e6312a2967649c8a34e57c93e" name="libreoffice-langpack-lv" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="f0c0fea0732d1bb86fe000122d76447c5fcd5c585ed28b171e4d4d4661409783" name="libreoffice-langpack-mai" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="60f1370a80d42aee0a193c75fc38c114a406341e7f32518e0069758efeff90b0" name="libreoffice-langpack-ml" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="288a9b8b68122d12213dd6e73601c9d9b3a993848894d57ebb3c49457acb8724" name="libreoffice-langpack-mr" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="85ccf747e7b7ecffd13ac97ccdc829dd2ab584997f084c034cee8a2a06d0d6c0" name="libreoffice-langpack-nb" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="93c52dc684e9eb6967822dfd711fafe5a23f58d64d0a7eae18808862b070e5a7" name="libreoffice-langpack-nl" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="2e10eaf557b20727180ee22db6f4ce844c94e27f9b460c543895c5f817cfb625" name="libreoffice-langpack-nn" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="bd0b67296b4521de32618faf707aef12e534f84b19e1263b9844b65603e315e4" name="libreoffice-langpack-nr" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="7450fcb6ed013b8fa18d228a2a673c43ed9674c1453c7106ce0350a3e370bcda" name="libreoffice-langpack-nso" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1346167364acda992dda600448719c2843b450ad19f2dfcb4f151e75673f2b90" name="libreoffice-langpack-or" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6cdb9d7962c054111354c32d01283d978eb1cd487c9ca6339511ca53d02138d0" name="libreoffice-langpack-pa" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="28e6386c811f570576d01188e2becf7490207a61ccc88ab248de96c72edd110f" name="libreoffice-langpack-pl" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="0a78bd920ed4cbc51201484b1b6caa606fa6771e3fc82c808ed768926fecb50d" name="libreoffice-langpack-pt-BR" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="d37bf8152b886a84a279a70cf5bd6d2b5a4678c64039dd4671a2bfa9f1c2923e" name="libreoffice-langpack-pt-PT" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="282425b4116262094a1de49dc6c45cf272c3142a11114a9aa942100564b8bae1" name="libreoffice-langpack-ro" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5692355c9025ea68ac8416de1077214a5dfe28cf125626994f9d8a3a639e8939" name="libreoffice-langpack-ru" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="092e9dad3bf66d049ada2f82b7a258a45a00b64858d2b53090e395ebec7ccf0e" name="libreoffice-langpack-si" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="321864e1d28598f372f2652a4dca05ed7a28c4e4352f28cdedeb0fc31479c726" name="libreoffice-langpack-sk" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="bd57536885c2a440f96f0b426e0f756c1d6ae1b09a48c44d409379ccbcd96617" name="libreoffice-langpack-sl" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="687fb901172fbcf1a8ffcbcee26a6f6ae654bfb4cec4229f66a16b16cfe40e0a" name="libreoffice-langpack-sr" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="876d8bf50bdd78c00be6921f8522c2659fe73705a098413e49629f07cbf5f7a5" name="libreoffice-langpack-ss" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="9a65e143ef32cedffc67d41da7bf4e15cfd28c560282469b448d1c3bffc22f8e" name="libreoffice-langpack-st" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="bb0c1026aad56418de67691f5b4f41b027beddafe269516cabcbaef8e0b68fa7" name="libreoffice-langpack-sv" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="61d9332e3ffccf6c37a4fa46ad71c29aa45060f19af07e06e2765a67bedd78f4" name="libreoffice-langpack-ta" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b7e4f719aa999b2b82133375ecf8010caab778349e8296ed3bd801425b3d1577" name="libreoffice-langpack-te" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="0d35ef03c174aae6381586e4ce5f90813ba1cb5dadf92aa7c43a044847ce3b7b" name="libreoffice-langpack-th" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="254acb172140e9a5716e556b5e7d14ab1c084e74486f6602c6d329a1e0340315" name="libreoffice-langpack-tn" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="c5f9b7bcd15e3e6d06ab31469ebaf461dcd8d5e74947d6eee43fee9ca2dbd1c0" name="libreoffice-langpack-tr" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="9bff23a56929568342c50546c3f670235b9db6a7198437d7a23711573af6af39" name="libreoffice-langpack-ts" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="dce665dd197506f0f66376b2f24656278dafce585f6f6218082f910a5ff12ded" name="libreoffice-langpack-uk" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1116989fb89763f991c237104168f162618dec9dd81cd230fac767801f7f8f9b" name="libreoffice-langpack-ve" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="bf8ab53acfe6d0b231e2f530c969a31b01e42c5395fe690ea079b704e6fad3f1" name="libreoffice-langpack-xh" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b38278b65530bd047a9d638a906147ed6a724e7dfa3b0af5b5564a8eadbcef19" name="libreoffice-langpack-zh-Hans" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a73e6408b652662a18f5ead6c41bacf2a0d558abb6a969c626ad9a511627ef7b" name="libreoffice-langpack-zh-Hant" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="42195a7575f73b56aea5ddfae6f97de240b80d3d14fc7291a9f916f460bfd59a" name="libreoffice-langpack-zu" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="828f8caa429526c10e0d4367700f9ed8cc9ed518d13c8d544494e480f2cd6825" name="libreoffice-librelogo" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="2004608b6dd12f0c5bd293f9c36de1a265ea2a8bd90a45a3a7119cdb8fde3007" name="libreoffice-math" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="78f9e1df0a6950f2bc46c155694b5bc96b931c2e37b35f9b8114c07545fe64f7" name="libreoffice-nlpsolver" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="0fcfa0c076e7ab23dd13ddcb0f9432e1538f762a46edf40518a762375b6d272c" name="libreoffice-officebean" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b42d53e8e078921a0bbe39081def9f00d80820cb1111144334fbc2f7c3ad94d2" name="libreoffice-ogltrans" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6c4483619170612c8622c639686a12b491bd39e1803960a2e52eac3f01bb13b0" name="libreoffice-opensymbol-fonts" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="82a4a0473a4d482e070ab51a98acd8c14df286d664524803f1fb99541edfa609" name="libreoffice-pdfimport" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a579b6a51f3d627293eec15b4bbf5c057fa3ac007c0847e29a52ff87c0fb4a6e" name="libreoffice-postgresql" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="fe2d8db1042c012c5468ea826954cd14345d2c84226ebb486ae3f1beaa9d98c5" name="libreoffice-pyuno" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1bfc163663102caa2de4d37b2bdc76e25fb861bc564deafd9ee1ce7fc3e4bb81" name="libreoffice-rhino" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="dc5f30a6522a25957f8d365294ff7bb5242d6af25b7b7517e9b5c1496d710311" name="libreoffice-sdk" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="840eab3bf91f290d3f8f10a3934ea6c79e3f8f8e473cf3cdcb1d31b5899b356e" name="libreoffice-sdk-doc" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="60bf09012d97683e3c65aab1ce947a983e003961241d2d8e031e133e11c563f0" name="libreoffice-ure" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="38576df3b4f0bc4a072f383adb14ec2c3a4530580a47596bbe500005de7792a7" name="libreoffice-ure" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ea3a94d5e7f2a4ec2a03514966941e9bb567cefc21402c524e2f604e90b4e8a9" name="libreoffice-wiki-publisher" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="d41e0a0431b676e993ac711f6e9d4782dda1af55b34451d873b9438fa2e0a739" name="libreoffice-writer" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="bfa265c149231215489709b3544cdf107f5ab085d479840629e9b706b59ae723" name="libreoffice-xsltfilter" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a843b43d7e5752235b648271d2b8a627e9a2f63c98cc9b4b0376509d6114a00a" name="libreofficekit" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="40b6b69950b49e55f4b3d715d5cd9c35b04b9cb37b33b8867a314ab8a6d9219a" name="libreofficekit" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="f165128ed499aa8efa53a0c306becfa16e0c788950d12ec9576c0fcb98089d12" name="libreofficekit-devel" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b8d84201cc2ec4c20c943caf56466cd8f4b0f043f19ef711be499d58696438b1" name="libreofficekit-devel" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="0a249f549a400074a4d1c9b76e23f69005f032105857950749c9bdbfc627ce6e" name="libreswan" arch="x86_64">
  <version epoch="0" ver="3.20" rel="5.el7_4"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-5" date="1445428800">- Resolves: rhbz#1271811 libreswan FIPS test mistakenly looks for non-existent file hashes</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-6" date="1467720000">- Resolves: rhbz#1283468 keyingtries=0 is broken
- Resolves: rhbz#1297816 When using SHA2 as PRF algorithm, nonce payload is below the RFC minimum size
- Resolves: rhbz#1344567 CVE-2016-5361 libreswan: IKEv1 protocol is vulnerable to DoS amplification attack
- Resolves: rhbz#1313747 ipsec pluto returns zero even if it fails
- Resolves: rhbz#1302778 fips does not check hash of some files (like _import_crl)
- Resolves: rhbz#1278063 Unable to authenticate with PAM for IKEv1 XAUTH
- Resolves: rhbz#1257079 Libreswan doesn't call NetworkManager helper in case of a connection error
- Resolves: rhbz#1272112 ipsec whack man page discrepancies
- Resolves: rhbz#1280449 PAM xauth method does not work with pam_sss
- Resolves: rhbz#1290907 ipsec initnss/checknss custom directory not recognized
- Resolves: rhbz#1309764 ipsec barf does not show pluto log correctly in the output
- Resolves: rhbz#1347735 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
- Resolves: rhbz#1219049 Pluto does not handle delete message from responder site in ikev1
- Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request
- Resolves: rhbz#1315412 ipsec.conf manpage does not contain any mention about crl-strict option
- Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-7" date="1470657600">- Resolves: rhbz#1311360  When IKE rekeys, if on a different tunnel, all subsequent attempts to rekey fail
- Resolves: rhbz#1361721 libreswan pluto segfault</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-8" date="1473249600">- Resolves: rhbz#1361721 libreswan pluto segfault [UPDATED]
- Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request [UPDATED]
- Resolves: rhbz#1309764 ipsec barf [additional man page update and --no-pager]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-0.1.dr3" date="1487592000">- Resolves: rhbz#1399883 rebase libreswan to 3.20</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-1" date="1489492800">- Resolves: rhbz#1399883 rebase libreswan to 3.20 (full release)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-2" date="1492084800">- Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels
- Resolves: rhbz#1444115 FIPS: libreswan must generate RSA keys with a minimal exponent of F4, nor E=3
- Resolves: rhbz#1341353 Allow Preshared Key authentication in FIPS mode for libreswan</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-3" date="1497268800">- Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels [updated]
- Resolves: rhbz#1458227 CAVS test driver does not work in FIPS mode
- Resolves: rhbz#1452672 (new-ksk-libreswan-el7) DNSSEC trust anchor cannot be updated without recompilation</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-4" date="1508414400">- Resolves: rhbz#1501809 libreswan does not establish IKE with xauth enabled but modecfg disabled
- Resolves: rhbz#1503949 xauth password length limited to 64 bytes while XAUTH_MAX_PASS_LENGTH (128)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-5" date="1508846400">- Resolves: rhbz#1503949 [updated - USE_DNSSEC setting was updated]</changelog>
</package>
<package pkgid="847eff54f51588a3a5704d498ec3c6ae2b68030ccda1bc97716e5ad3cdf3862c" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="60e415c0cf1fdde2bf2392d598af4776b6cd848d5aaad6edeeca105feb17fc35" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="bfacfea576d9f5a9e3a63e61e787e7c94b173e4b55d5a4d4690fec7969509df2" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="a4ff640de55102b352af4cf71d1a631f93591372b1c575cff38fa6a5b732ea02" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="759a109b802950a2e21982db1f52bda5e35ba4622d642aeac1985e63531ce444" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="d897a291cdfe0b260292cf57aa76c235f42dfa72c595380410abffba71b2fd99" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="94adbdea1299e336923cdc6571e4fbb36de598ce9054378cc57450d0fc864c4c" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="6a6fdbde988fde373d94833e370486b7ebce98ec4a8bd49cb845e82c782b37d9" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="09257debd963dd606410fcbcfc5763117f1d7952897b9bf8a28b9c324d5e29b3" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="e7fad78aa7a788cbd26cc818e948ac26aafc9be7a12a6fdc14de7124c96f3eb9" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="001ea93bcd8bb80f82ea6d32a0410b5d5d6ece946ddaa12abe4fc47b13c6428b" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="5e49866b4cb64388fa333065d824c35200e6d2439bafad8c3b4c9cf056933ec3" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="5db99fcc68c15c19dcc62ba9a5a0efa71500c3ff8e2803da0c0aef2eca087d89" name="libsoup" arch="i686">
  <version epoch="0" ver="2.56.0" rel="4.el7_4"/>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.46.0-3" date="1413720000">- Apply upstream patch to fix a crash in evolution (rh #1097202)</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-2" date="1430136000">- Update to 2.48.1
- Resolves: #1174446</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-3" date="1432641600">- Fix "make check" when LC_ALL is set (rh #1224989)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-4" date="1460548800">- Update ja.po translation file (rh #1304238)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-5" date="1460548801">- soup_headers_parse: deal with NUL bytes in headers (rh #1302366)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-6" date="1461067200">- NTLM auth failure with latest samba (rh #1328453)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.56.0-1" date="1474286400">- Update to 2.56.0
- Resolves: #1387019</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.56.0-2" date="1493208000">- Add patch to address some of Coverity Scan and clang reported issues</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-3" date="1498132800">- libsoup stuck on infinite loop for kerberized pages (rh #1439798)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-4" date="1502280000">- Fix chunked decoding buffer overrun (CVE-2017-2885) (rh #1479322)</changelog>
</package>
<package pkgid="b9787f910a15cb1c2d33b4303420557dae97cb6c93a67258956096d77f3bb85a" name="libsoup" arch="x86_64">
  <version epoch="0" ver="2.56.0" rel="4.el7_4"/>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.46.0-3" date="1413720000">- Apply upstream patch to fix a crash in evolution (rh #1097202)</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-2" date="1430136000">- Update to 2.48.1
- Resolves: #1174446</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-3" date="1432641600">- Fix "make check" when LC_ALL is set (rh #1224989)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-4" date="1460548800">- Update ja.po translation file (rh #1304238)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-5" date="1460548801">- soup_headers_parse: deal with NUL bytes in headers (rh #1302366)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-6" date="1461067200">- NTLM auth failure with latest samba (rh #1328453)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.56.0-1" date="1474286400">- Update to 2.56.0
- Resolves: #1387019</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.56.0-2" date="1493208000">- Add patch to address some of Coverity Scan and clang reported issues</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-3" date="1498132800">- libsoup stuck on infinite loop for kerberized pages (rh #1439798)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-4" date="1502280000">- Fix chunked decoding buffer overrun (CVE-2017-2885) (rh #1479322)</changelog>
</package>
<package pkgid="ffb2b96c0127642259e08c9c6208180e17f7b596264457de2768b0fc2a2b04d0" name="libsoup-devel" arch="i686">
  <version epoch="0" ver="2.56.0" rel="4.el7_4"/>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.46.0-3" date="1413720000">- Apply upstream patch to fix a crash in evolution (rh #1097202)</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-2" date="1430136000">- Update to 2.48.1
- Resolves: #1174446</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-3" date="1432641600">- Fix "make check" when LC_ALL is set (rh #1224989)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-4" date="1460548800">- Update ja.po translation file (rh #1304238)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-5" date="1460548801">- soup_headers_parse: deal with NUL bytes in headers (rh #1302366)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-6" date="1461067200">- NTLM auth failure with latest samba (rh #1328453)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.56.0-1" date="1474286400">- Update to 2.56.0
- Resolves: #1387019</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.56.0-2" date="1493208000">- Add patch to address some of Coverity Scan and clang reported issues</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-3" date="1498132800">- libsoup stuck on infinite loop for kerberized pages (rh #1439798)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-4" date="1502280000">- Fix chunked decoding buffer overrun (CVE-2017-2885) (rh #1479322)</changelog>
</package>
<package pkgid="802d061e59a0639c2905da9ac1868884bd6cda14b7ff7b10fda13eaeba3fedb6" name="libsoup-devel" arch="x86_64">
  <version epoch="0" ver="2.56.0" rel="4.el7_4"/>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.46.0-3" date="1413720000">- Apply upstream patch to fix a crash in evolution (rh #1097202)</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-2" date="1430136000">- Update to 2.48.1
- Resolves: #1174446</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-3" date="1432641600">- Fix "make check" when LC_ALL is set (rh #1224989)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-4" date="1460548800">- Update ja.po translation file (rh #1304238)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-5" date="1460548801">- soup_headers_parse: deal with NUL bytes in headers (rh #1302366)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-6" date="1461067200">- NTLM auth failure with latest samba (rh #1328453)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.56.0-1" date="1474286400">- Update to 2.56.0
- Resolves: #1387019</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.56.0-2" date="1493208000">- Add patch to address some of Coverity Scan and clang reported issues</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-3" date="1498132800">- libsoup stuck on infinite loop for kerberized pages (rh #1439798)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-4" date="1502280000">- Fix chunked decoding buffer overrun (CVE-2017-2885) (rh #1479322)</changelog>
</package>
<package pkgid="81c7010790c3c81431972e1285d38618a40e7649f6ab3ed4bf81769eb7d8ea6c" name="libssh" arch="i686">
  <version epoch="0" ver="0.7.1" rel="3.el7"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.6.0-1" date="1389182400">- Update to 0.6.0</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.6.1-1" date="1392033600">- Update to version 0.6.1.
- resolves: #1056757 - Fix scp mode.
- resolves: #1053305 - Fix known_hosts heuristic.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.6.3-1" date="1393934400">- Fix CVE-2014-0017.</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-1" date="1427889600">- Security fix for CVE-2014-8132.</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-2" date="1429617600">- Security fix for CVE-2015-3145.</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-3" date="1429704000">- Enable _hardened_build</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-4" date="1429704001">- Updated patch for CVE-2015-3146</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.7.1-1" date="1436184000">- Updated to 0.7.1 release rhbz#1239085</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.7.1-2" date="1456142400">- Security fix for CVE-2016-0739 rhbz#1305971</changelog>
  <changelog author="- Dominik Perpeet &lt;dperpeet@redhat.com&gt; - 0.7.1-3" date="1490184000">- Fix agent auth on big endian machines</changelog>
</package>
<package pkgid="db6405adcacc0240062aac058f0df37165523907fd8d51eec1c362332fad63eb" name="libssh" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="3.el7"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.6.0-1" date="1389182400">- Update to 0.6.0</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.6.1-1" date="1392033600">- Update to version 0.6.1.
- resolves: #1056757 - Fix scp mode.
- resolves: #1053305 - Fix known_hosts heuristic.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.6.3-1" date="1393934400">- Fix CVE-2014-0017.</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-1" date="1427889600">- Security fix for CVE-2014-8132.</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-2" date="1429617600">- Security fix for CVE-2015-3145.</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-3" date="1429704000">- Enable _hardened_build</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-4" date="1429704001">- Updated patch for CVE-2015-3146</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.7.1-1" date="1436184000">- Updated to 0.7.1 release rhbz#1239085</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.7.1-2" date="1456142400">- Security fix for CVE-2016-0739 rhbz#1305971</changelog>
  <changelog author="- Dominik Perpeet &lt;dperpeet@redhat.com&gt; - 0.7.1-3" date="1490184000">- Fix agent auth on big endian machines</changelog>
</package>
<package pkgid="c353780a55e639f72abfabca6dcfc769804ff8f355995d31f1a1c0da9906e49a" name="libssh-devel" arch="i686">
  <version epoch="0" ver="0.7.1" rel="3.el7"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.6.0-1" date="1389182400">- Update to 0.6.0</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.6.1-1" date="1392033600">- Update to version 0.6.1.
- resolves: #1056757 - Fix scp mode.
- resolves: #1053305 - Fix known_hosts heuristic.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.6.3-1" date="1393934400">- Fix CVE-2014-0017.</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-1" date="1427889600">- Security fix for CVE-2014-8132.</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-2" date="1429617600">- Security fix for CVE-2015-3145.</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-3" date="1429704000">- Enable _hardened_build</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-4" date="1429704001">- Updated patch for CVE-2015-3146</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.7.1-1" date="1436184000">- Updated to 0.7.1 release rhbz#1239085</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.7.1-2" date="1456142400">- Security fix for CVE-2016-0739 rhbz#1305971</changelog>
  <changelog author="- Dominik Perpeet &lt;dperpeet@redhat.com&gt; - 0.7.1-3" date="1490184000">- Fix agent auth on big endian machines</changelog>
</package>
<package pkgid="eaf0819886fbf071d1196ae1688b28b8ffa67094e00fcc30ce1647947fefe4e9" name="libssh-devel" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="3.el7"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.6.0-1" date="1389182400">- Update to 0.6.0</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.6.1-1" date="1392033600">- Update to version 0.6.1.
- resolves: #1056757 - Fix scp mode.
- resolves: #1053305 - Fix known_hosts heuristic.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.6.3-1" date="1393934400">- Fix CVE-2014-0017.</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-1" date="1427889600">- Security fix for CVE-2014-8132.</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-2" date="1429617600">- Security fix for CVE-2015-3145.</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-3" date="1429704000">- Enable _hardened_build</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-4" date="1429704001">- Updated patch for CVE-2015-3146</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.7.1-1" date="1436184000">- Updated to 0.7.1 release rhbz#1239085</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.7.1-2" date="1456142400">- Security fix for CVE-2016-0739 rhbz#1305971</changelog>
  <changelog author="- Dominik Perpeet &lt;dperpeet@redhat.com&gt; - 0.7.1-3" date="1490184000">- Fix agent auth on big endian machines</changelog>
</package>
<package pkgid="986ef38501f5bb8ee6e7893494c2002054093fbeaf10594625b2495bf08fc920" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="6f50c3b0905daf6001ba23717dd3e56b5003699aa8855c3be69f4e822a82bc06" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="4886879a00c75ef2a4f794582c45eb1b99d6abdb528a8f164f3acc3b4cd60fec" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="9c6a45ac9315c0f5a8726ccc8c96202ce681bd84871fa78445231e308c2f0d8c" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="e13536ef206c6dd20c95e8900c430dc9cee01223a61b2555b02eaf366b4bb41e" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="96d3df6169b0e4c52826f6052c1f8692ad03f15a089a7db75334c2b08f01d66d" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="f19b3e23712b08f06f88485b79952540f9e2add081a6fbede10e6710fca6a1c7" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="3a353223bc6e6054549996a0b20aa69ffab0e64e91fd1d7052ce7e1a7618a662" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="0c14e48f866d84aeb55b7088f9886dd2388af643a7be9c21d6dfc0f6c495c29e" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="3ec5cf58b196621a42eab14200123a7af358b93b69ed1d87fec8abc4ac994704" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="6ea607349c72a77450099323ad2168fceaf49a575b103560f362ff06b36c011d" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="43b097eb9c6c96e10b251a02a376d82f598080c822b46ef68d83e1080e29a065" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="2bf9d46981ac6245d9e7afe3621969352e36c786b446dc7fde396e8dd10da538" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="4ce1ab332e4f0ce48070542a5e7c0debe51f479b5e10ce0861d5db1309a81347" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="a8dda15920f7477c7bc36191d08a6d442a3e803ade00a3c4dba8598dffda8d8c" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="2ebde17f58b0550520a4a8d5f146c9ca34b43f27df956975bfbf1aea9f17263b" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="a45c9d2f612126034e6d3baae227518269b051f28e60ed171a71a69bd5d98d76" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="e8d2e89fb84134d8c33677208475cc27c8df17163ca388d62babc63375f7623c" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="a8dcb54fa73402be4d3d32144708604718277d20d4da42fb8f045d47e8843138" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="260f8e6c93cf5cfec990f7a1b0ab9e837bf0dc5c2fecc91111b8a0c993504255" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="cd19f8f9d031c58f078bff116c84d0e430ae07a452462bd6bd4c9ae6c117e194" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="f25208a3369486c270286b40a1ff9d1f079309588ae4f92052b915453da7cac7" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="a81c5117e5a4d3441ca632a7dbbd15a836754712dfc002ff1260336d2e16673b" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="f17766b2cfe043ab5295301777c4348f2e1134098c92211c1eab12fe0a77a57a" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="d7b1f38f70bf57ba65d193451484b9042a218b3b88dab35d21ef07e81bff05cb" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="fd4141d23f82447089dd30e4b5f5f6ca94d8c8854bf656f4a6d709d5a115d5f1" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="6af5c213a209b5f0858aab31664ae2c9e66cef688ce85bf1dbd194c953ca551e" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="adb47b5ec0bd4eb474b32765a44894a1755ada0e2c8c462f2ee471ab1dc5816b" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="b0293b8b41e22e1dbfd13a1666d69b8acef03541b0cbc94797f5518ae0b50cf6" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="c26eb7f553a7b8418cf1339831c4d06f6ed322229f058d44115d1c1ea89d7d02" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="8da3ee87289f71d9c50f2f6f3e76a3a96cc58068d92238ad6381ca40ea11160b" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="31088964d0165414e6a8d1db569dce69c2b831247850e304553d8e1bbaffaf28" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="1556480f7f7203cdcb964010fd0737c7a2fbb209b0484d02710aedb6a65bb79a" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="3c2081043f5024b248bcd6e56ec5ed7d087f90966a61b07cf5873da6002f249f" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="8cef14f665eb0b0fe40e44f9445d853046b1ed44c6e6f1e59f1b4e3c5b7323d7" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="400338aa8b6b033acd4b748a896fce6628c05eab5fd5db8ba6a98313a254633d" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="a4c29051505f35eea421e29fe8068c21fd715933f3ff5590565d1c84d93e2372" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="536cdb4683a9d4164ddb0e865d817014b52fe9280883e0858aa1a2d52c4902d9" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="9ca053a106691d165650809e248db44c5a70b3989457af69ef294f5e6e0a2531" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="abe0b74a6725f6450c307746681fb44e65dac3a0aba4ff9e58cb6a96706b552d" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="f6635beff7a6c4d463be7ce4a6ed8587d098d803a3d95278366b595a8ea70397" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="ee81eb803b7168e88dc2defc05b9930c41b8cc600c2474776fe97378d6ab3803" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="619cfb1363b0dac3da692a7de2ea5d531cb8391db101aad7bb3c30e86a76d3a2" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="e446d777dbe199eaa7f4a092448cfe484aa49ebfa21becbcd8ed6fe47dcfb39f" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="89ec57fd5303516ca9c9b7798fbc5410d49c856ccd9f57c9dc0ea1cb51460484" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="eb7a4ef1440ec6c37e694bf3a6402e77a40c32ce69ba4316b9378fe8ee9ffab0" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="38daa85c1a481ddf8c5dcffae9117b32af9a1cdd36ea75d3c81c1aa6392a49ce" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="6c4b5321c558e1c387d0b79a930512c3a38a43ed75746c63a0071b2af76365de" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="9125d40ccb47277f0c240ed671c8e82ddb7dd7abf4ffee857fb10cfbccabfce2" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="fcac6c4f1117c7d68c0e079ea8f4ce99cff1a8d8c936bb4e7d76dbe8f0d5f330" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="db743bc9d82f43a91a89681af9ed312769b64ecd86e6f5c7d28644bbecf56349" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="eea10cdac339b1272890fc72c23d68a9ab8b85da201aae990fcc0dacca88bd78" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="51d649785bfa8de5c25a9eae953255c399be5598db8c67b044ba839d62592ac9" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="6f660b72444de48458a0851612d45b0360a8b47dcfb4bec4db6c8d3e7cec37eb" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="4d287bc269f9c9aad1781be58d8938edcb45d648eb3fd0e67ac88b05a07c420d" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="a381fb1340f23ec8e208b46ac7ae49b951cd55166a2d52408cedb83674ee6ae0" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="13f0d4f6f2b9a6ac5973787bd09a91b6e8924e0c2b728c5ea014d1e3af0081a1" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="125ee8fcbbee52b459e3ad571b9a3c1b7a782fd1f9be31e7b9fbabfd62b731bf" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="a42986c8ec8c08351533f9d6dfb7141c4e92259aa1d2426d3181096f67c749e5" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="dd636ab514a9961fd0e78d68bf1163985a764342533d289758cd6924ee3b0efc" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="aa6f6d6bacf8f3928cb5ce6345e8b40ec4525a57cc88026f84ac82e417bc39b4" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="058cc409529a00af3a0f8b4bc2645ee8241a366c69dfa30bc4b088acde542aac" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="a78d74e8d5d60a50b4ffe88b9f1f097a5237bce3a8e5e829e16708888a713148" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="237f2d7b21937876de070288c44709e5643570d43ff89a0c1a13ca066ef994eb" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="f85d137210ba95f81ee7608ef75b07d6e2ade99be781a700b775e675a283b7e9" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="a1f9eb2e3fc425ef57b04ba98822ae793c28e2892365f441cc516eca060721cc" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="da667481d3601dbf5ae54649007280eeb4ebe10498ff7f4922fd2ed6329832e9" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="95e117323b89be74aaa6648fab3feae523b09f8e392da4cfa6bb1d05de9da99d" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="0a9f861772c3ffe88aa6f6da2e3c62f3f262176c8965b1bf3e6dfa23a277a632" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="d38fd3d5b7b222aec86e180a183b6bbf0c9d3e5247499ccdf8b7d6feb61a25f4" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="1af57a40a40147b0786ae7ba4bbc6204ebfefa167a52e9d36915fb5a57f0db38" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="f82ed9e68adb55149b01865630a62bbb08127ada565a1dacd8e293887af4799c" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="ce9059e3ca84ce167ac33d7854c5c8af34279d7f8492ab04ba295cab6c7adb9a" name="libstdc++" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="3308169f2fd16554d118fd63f2e0ab151e1cd7f652de9e1b512d43d3bdae356c" name="libstdc++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="afa140792c0c0625c60297c63d7b7f16bb99166691a9ce82980d4cb7b6918de7" name="libstdc++" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="9a3757e27cbc3483d3bbb4117d9b26b5dd6fbcaaf34ebe350f9968a42faa20bc" name="libstdc++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="3f0bbe9b7dadfedd40310fe9df270b235e9cb1edffd66d28e16f1ba6b4257311" name="libstdc++-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="0a782aec5a39a78265aee41a6ff773d514b68276d06df8680301ee5292b63ca9" name="libstdc++-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="51eb78a0d943997b75fd65a9ae9a94cdeae5eff1614f60f3cc48357438e849c8" name="libstdc++-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="56253df0f8c891a815428ced2766f05cb39b88dd09f9b2f4df9df8743f60cca1" name="libstdc++-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="ab7622dfddf86faeef4d558f953a906ea19f344abd23f9465572805b04c7f1ba" name="libstdc++-docs" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="9dcc354b10dece7d4b371130e53c5fc565ffb59bd981ef85d30f885c39533004" name="libstdc++-docs" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="4353f318b67f04e705b588dc801794b9a6de343552520176049b3dca0e229172" name="libstdc++-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="29a8b0ddd480417ee4b14ec69a45815d4ff76873f61acacc594e23a4f4bc48e2" name="libstdc++-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="0799e74e60ab594f4042336f8db03953f033c6814dabd044c50404f5838519c8" name="libstdc++-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="7debf2791ae1aa1e6d935a087c13847255488487c246edd3367cea61a5f2fa77" name="libstdc++-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="8eda7dfbc1b4e2ba5c4b387012501682271c763870661751729c17a1360e105f" name="libstoraged" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="4.el7"/>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.1.0-3" date="1435147200">- Changes for EPEL-7
  - Lower systemd required version to 208
  - Rewrite BuildRequires for systemd-devel</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.1.0-4" date="1435147201">- Add Requires for storaged modules</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.1.1-1" date="1436184000">- Upgrade to 2.1.1
- Related: rhbz#1227797</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.2.0-1" date="1440504000">- Upgrade to 2.2.0
- Related: rhbz#1227797</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.2.0-3" date="1440676800">- Rebuild to fix upgrade path</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.2.0-4" date="1460116800">- Fix segfault when no configuration is given for a LUKS device
- Resolves: rhbz#1324209</changelog>
  <changelog author="Tomas Smetana &lt;tsmetana@redhat.com&gt; - 2.5.2-1" date="1465387200">- Upgrade to 2.5.2
- Resolves: rhbz#1340359</changelog>
  <changelog author="Tomas Smetana &lt;tsmetana@redhat.com&gt; - 2.5.2-2" date="1468238400">- Enable iSCSI support only when the necessary API is available
- Resolves: rhbz#1352454</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 2.5.2-3" date="1492084800">- Bump and rebuild for all architectures</changelog>
  <changelog author="Vratislav Podzimek &lt;vpodzime@redhat.com&gt; - 2.5.2-4" date="1498564800">- Fix seg fault in udiskslvmhelper
  Resolves: rhbz#1436914
- lvm2daemonutil.c: Close FD for spawned process
  Resolves: rhbz#1463843</changelog>
</package>
<package pkgid="b0a68bd48fe81046fe617e2f968824b714fbb95ffe9ae770bafe91be7eaeedf2" name="libstoraged-devel" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="4.el7"/>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.1.0-3" date="1435147200">- Changes for EPEL-7
  - Lower systemd required version to 208
  - Rewrite BuildRequires for systemd-devel</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.1.0-4" date="1435147201">- Add Requires for storaged modules</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.1.1-1" date="1436184000">- Upgrade to 2.1.1
- Related: rhbz#1227797</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.2.0-1" date="1440504000">- Upgrade to 2.2.0
- Related: rhbz#1227797</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.2.0-3" date="1440676800">- Rebuild to fix upgrade path</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.2.0-4" date="1460116800">- Fix segfault when no configuration is given for a LUKS device
- Resolves: rhbz#1324209</changelog>
  <changelog author="Tomas Smetana &lt;tsmetana@redhat.com&gt; - 2.5.2-1" date="1465387200">- Upgrade to 2.5.2
- Resolves: rhbz#1340359</changelog>
  <changelog author="Tomas Smetana &lt;tsmetana@redhat.com&gt; - 2.5.2-2" date="1468238400">- Enable iSCSI support only when the necessary API is available
- Resolves: rhbz#1352454</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 2.5.2-3" date="1492084800">- Bump and rebuild for all architectures</changelog>
  <changelog author="Vratislav Podzimek &lt;vpodzime@redhat.com&gt; - 2.5.2-4" date="1498564800">- Fix seg fault in udiskslvmhelper
  Resolves: rhbz#1436914
- lvm2daemonutil.c: Close FD for spawned process
  Resolves: rhbz#1463843</changelog>
</package>
<package pkgid="2ebed0b35ba2c7d22449394d6a8a2735c7b95e5edaff6a7659c47e4c9cdb473a" name="libstoragemgmt" arch="i686">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="4f79614951bff8194b891cb87f999c773cfe5de47f4bd58e0be140d9b0282ab7" name="libstoragemgmt" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="34e76962dfdc3c97603cf8bd6fb79af27cf3dff41936d60e698c12568fe42683" name="libstoragemgmt-devel" arch="i686">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="d8bebf8ace1ba54fb6ef5dd9b7a0875685e473dd09b929465a927d75705279dd" name="libstoragemgmt-devel" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="222a18b6c5f21329a3733cc7448facc5fdd9970515f3424598704228b9d0feb5" name="libstoragemgmt-hpsa-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="e456c24c8527fe163b804678efc5226567e856d9c7f0d36ada4ffa7479f1702b" name="libstoragemgmt-megaraid-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="af272dda38df6a5334704119f65c45ecb29d3fd53034c72753a5cbb8c04006f2" name="libstoragemgmt-netapp-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="a874de39ea30407e891e063947a7364da498fa15be3c816b2e4eaf29b9bc8745" name="libstoragemgmt-nstor-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="42f69d1d433200159ef10944837a461f526201273ac70baf51de762d3cc2b1de" name="libstoragemgmt-python" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="b2bac39335e1d73ce0ffaaa9adbb0f03a7d052ddbe19b48fdf36d9baf2a7722e" name="libstoragemgmt-python-clibs" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="10870366e14051456af334e00abc6e1e19fe734a7176fc4c63bfe3ce2b46649e" name="libstoragemgmt-smis-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="54a3ee5504bc2c72ac309beaadc23a9243ed5e835417959aa63447bff06502e8" name="libstoragemgmt-targetd-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="678c3f5c2a1097d8cfe06b37a1eb721065faf5b053b9de3c1d3bdc666d324fd2" name="libstoragemgmt-udev" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="070970ea04ffd48be3915385a19b9b9094889767039eeec9b849b03d71b5eb28" name="libteam" arch="i686">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="403e13fd0f9064746a9295d16917bc13fd83c0557bd421b1e0fe3ca0c80fcdf3" name="libteam" arch="x86_64">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="7ff97fe41f82a02d01c537ce83f8cba1cf35fda768e69e448c4eb151455c2897" name="libteam-devel" arch="i686">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="e72f950d33460e59e82c59d1748b2a8995e6d398e2c170cc0b760a0a8b13b04e" name="libteam-devel" arch="x86_64">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="6919e786c08a119a458a5aed602a8aae512ffa36fbf78c421fe39623314fd4e5" name="libteam-doc" arch="x86_64">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="b7e2f0a37cffaeb9ef800c187f8e601d33203aeaf491a3756973ca5950081ad9" name="libtevent" arch="i686">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="661b3f70c0760fdaa219ca740708a4a2829838707da2d9a292561fd639bcb415" name="libtevent" arch="x86_64">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="2c5567eb38f395b96c8c4e1e0b9e8f3b10bb3535c841a3404c1723ea66433600" name="libtevent-devel" arch="i686">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="d91e1dce4b98e6657702594fce12f9ca6edf15aeb66701538723fa4445170321" name="libtevent-devel" arch="x86_64">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="0480c963717b5f4435b5ed1c7ba2ccdaf92ae8d48e8044d1e03c93380334e205" name="libtsan" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="ca35f01a83830fba6119f00475cd8f2a386c938c8d90308f213b6c19c17560cb" name="libtsan" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="cfec140d98adb0a99574cdd96cbe7a261bf42cb2d0ef455fa9f62221b256691c" name="libtsan-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="5319c78fd7d0a12474942c593666e3f5c62f13d29a80f902f6b1a38ff1bce23d" name="libtsan-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="84b75de71b4f34ddc60b6f7d9954125a9b97edffb4df194abd46a7230679d17b" name="libuuid" arch="i686">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="b19e7ebef379e88e0ef608fb8d05f9af4158674b0a10023c98a156ef02505076" name="libuuid" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="85f2b046b9ca2cf75275cc150f589d89eb37c1b1e23405a399df4dcfc8fff8ad" name="libuuid-devel" arch="i686">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="9794e66876af8892929b964ad9dc9b163a9fbcc6de073b9f8e90b7faff0ed4b5" name="libuuid-devel" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="6de6c5c6f0783f7b273d9f616141bc267f221a7879c4ae12ca86c7c04b3cc81c" name="libvirt" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="f39f4c89d675c5a48f8b2ee452376a1de9bb25a7bba7c2b12ee278036448d1d2" name="libvirt" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="8eeab1e2e3d89eaf1dfc7a17c309b7d3efc5c576e576fc32433bd62dcf324b54" name="libvirt" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="d1ea74136fd3ae02cbe596c54449c189f60abb19d8f241b8657584deb50bbb2e" name="libvirt" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="861a4a3da63d67e2fb67bafe9a969b261a67f2f79b2171cfa18473115b00d090" name="libvirt" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="5e86393ce78b2cac8534a9bddca4f70a9a2d49c1a119becd7f9eb140e985b65c" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="e3f09334ac60f3e2cde4a9b92c0029733e7fc6c0296db470cdb5805a7d06321b" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="658caf5d6e148fdc7409c2f11b828ff0b17936c6f4ffeec8e27e432bef3edd26" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="2e7f69103681390f24243a55a6994690178a2604e315c19523aec0130975b44d" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="736b3b3aec795493c94ed7a7149697b0e234f953afb73eb3495d7354ccf18d12" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="77436ed46058e762089df96885025f1327acd98f784f8c1a524d85ccec60cd29" name="libvirt-client" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="247214eba5d9e90e76d13c24b181f3f67edc55236ed67836952d2479411c5c42" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="1c7930bd684f462a3fd051e686815f5658c2e911b40315961c118b164570e3ac" name="libvirt-client" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="83042565b22c7a6c3edc5d9e30722ee5b416cb833cb27ca2d3be54362bbedf73" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="a708504c6480e4e2f0dd04c48f1ff280ba42e8444a389e1bc50bee1cc99a5a26" name="libvirt-client" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="19426080b418c9422230af68775bf20b464a7b91ef15a1667ddb92a3599c2599" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="794f43e4bd09dc99ed8e41d5e807b4b414f8459cdfbc62eab51b2ff808bae961" name="libvirt-client" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="971fa0b2ab96ae2f1bc7ebae20b3d73f2ee5efc6bf42bf937fc71cd43bf04945" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="624c266fad390de08f8d935b3fdefd997747cc82b77b9e664a9cf3396fb012e0" name="libvirt-client" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="83efe841b0931b75b834c7505ad2a45f763a5accbdcb678f75c161469d98d4dd" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="c0204cc18abc08e77fff7a79bd64061840b0b26da6e32ca9e2c97aa122cb470e" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="0084fae0c29361224d8fee34a3957a7adf52f40d42a19c0adf74aa921cdcb790" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="ad08d67090b32f7e8532f028bd4173e69e3a2fb96b9dbb7436c9d351a72c8bae" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="cc07da6cd1f2e796765067f1e7d224897343c110b7a0c0bf2e09e9aeb9831b4f" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="5f82be53d0bb5dfce6c26b81d3c3da15c33c35411414e3d8c15451ac5d251be8" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="9fa7ac1a1db2e1998178d8b39690fbe1479263937d309436864fa1d33505e003" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="fbad9a8d43dfcf32b4981a4af873bac2ff3429b74ce1c109fcc94ca7e80bc44b" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="15956ecf7606b1c01815763d3ff18d86fbeb45af5ea0b3605060526938881218" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="7333e6fb5d342e5a5ccbfba9c5a73307c653cbdb0bcb7bab476bb5a98344a88f" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="456eeba6a91feb2221cc72b0510dc172c54c32af3e67260cc36c2af057b0bb69" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="04c1dbae639554e3e29ed0f52c8b7757283ad13d29968d13873a8fd50524e2f5" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="4301e78878afc36138c9b6df66397c0542b6b7d5e7c9570d4778dc25115ff56b" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="4c3f81cb0314b5504682692a9ea545f4a8519cbacb9664761539a154f281abb5" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="bce71246916fef8638c50511bd83ddc1d5dbc95736db422a9d61147c8017f5fd" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="65288b1cdae6f997ad8fbaae91c8e31da8a2f11e86e575ded2dc9b8ee59feec4" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="ab33494052094d64175ab13c163aeaf3aaac3ff6a961d5632b9c0031eef8c789" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="bcc0d4cdbc5f8023cad017b6b36fbf0f1dd8a819a60af7650bed001c4ae72b39" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="715b1e7029fda6dd198546c3e343d5f3d49d90b72a02b915c0a8f39e076fb85b" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="be3c2a73289a38e0a3e0b3c4d488a9a2bd9a5356cef1cc1d82bb83bd236fe1ba" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="a9be97583043cb21a4f1719a5fbb03951d5a7dc7677354f16693ea185ddf9ca5" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="780e84fde4198ac4e881d06927331b977adf2aa7b9618b2d47a9d6db1530496a" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="dc0c7b25b36c7feda23ed91f190fdec2739cbb6b1e85ca63875fe9b98fabff75" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="a5013a0cce919989d379e8105fca5f5a36aa5aed0d60c928bb9dec7c864462d1" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="5a789e6873cf00e232c492d75a6ed8f874c5470f0f05d8cf2a5e4d5c94ec96ca" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="7cf6055e9d5ec3703e7fff84fcf572183de936ac1b9a762fc488e9df7ead9a2a" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="aba8b4f2991f05e9777b8a53a7345eb070ef6aa54cc1fd98742e59bc38e2ad7c" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="fdfc5085ee566686119fb63e48ca31ce9fe1324795bdf9a39dbedcd7668eeb93" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="fcd4ec05103c69320c3d5a3c529ef3ce0757c778c1e18f87ca2be8362d82fc72" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="46519b925d863db68d10cf5a50212cdafff6945582d2f57850f125b835460030" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="6481e4c35d229993a86646d8457e72637739e8f5c016f5ce5cb29cf50f1af0dc" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="e614dbdb743d3e88f4a5afd350358967c1c4ca77e0391ff04ddf76776c64323c" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="1ea84f9d294e086900303e59df137409f3f6a949fb8737a8d906c81d438f6cbc" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="96ea3835ed67e0fa545efd79e551e55e8cc21ae6d6093215c542b5c6ff204e69" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="1e057e88d11f84b50e9235eaccfda11b57362f96e6e45334efd477d540b77f2c" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="b2ea3c59e244b5be42a815a12142ab78b6ee74127aa9ced9bc03168fdca39f80" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="7b585f20e7f6c1f581a5e74c2353b34c3c821b3facc5d518bd999dc51eccf3ad" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="8a3b4e41f653b88e6d4bce3116d6a5da8a062916caa3b646aa67dc7e26f3172b" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="268f5b57e1cf3f6b56d564b4944c9822e0deb26b43be995abd2d5b646e23f5fd" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="a2943e10845624036fe9ae414a4e01330db6080c42b9cb21e9ecd48924c919be" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="588be9941e7a8ba6ed0dbc3440698e9d6892fb1e97da8e2423b64d45c54716a4" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="7809ccf593dec81eda7383fb3ef31c20953bee424649068ee44b8cc528c20055" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="009003e6a97d53f4e198c93408e99fdd9087947f2f5a766f057721431467446a" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="fb370b34fff2ddb1ad2cdfcba7aab22247241c14d5ac960677a1bef8802832b5" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="cecfca5e96b3707a5b49da46a994969a7a08d4a12928f7e95d89f0c3fad7dc5c" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="3f74f4044ea4bf48863b92e26c66a8cc337fb885541ff62e67b70f87548fe2bf" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="c0dbba4b5ee26636d89a52d37c45eb02079c809dc154c0e6da41a4a004378eaa" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="fb711d5835b275587d99a250d5d9ea0698d0f88428d386957e1a589b7478a4a7" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="2292fdc3836087de6f2d44b0cb1670bd80adde9af9998aacfd7a440a5bbd905d" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="84980919253f48001f92608856380cdc916f4da8eed3ee62a82280e6fd7ba4b7" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="9eab16058787bf57c07d7e47e6f826503af8f943343db3cdb6a0bb9e36c767e3" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="7f6c773499d883c2e83936d14c0fe4d728bfb914b99b0b022314b401804c5483" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="8ebe4c1765aaf6af41556cf7a48d2a6ac4e8c606c6018f2143f89ec8af4fb628" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="e5f746d844d8015f4bc9cd661809a7362436dee32864a8cf027d5f2fc3fca2d2" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="853f317cd17f6a2ae88e2f11acebe9483ae695cce2b64e7e13a8f02a662f0288" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="918a219c6e2c44fd4cf5f6280ad798ae092cfe421875d50a024c56e7409f8fe2" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="ad59c0d98e69b00403320e525c0a77c5488baa79a6c47cfc20e4dc40aaf3fbaf" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="5695d30a9fbedd160327010109be084a8d72abf8ced04e4448eafc30d9ca40f3" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="d75d2738487b21dc0179ff24a92d039875775ceb8b843c31bd72111b2d10e786" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="8cc3214fedc1431bb0b4369b3958b5c02ede37d7e616a1d250b7342363f2f18e" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="c972d5a4f0863b4db5191a9d6d8564aea1c74e9d20d99edd65ba48081e4b9871" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="c631ab007d5c7a1b6f9db63a53ac1967c86461a3bfe9a9bc2b64afe7a5138c2c" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="89ea2086530426921b7117d934d4d3a19e6d04cf1aff06788c3264c0016a7f86" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="d1f0715f3f78aff0714e912b4122fd3bffc85189b93655ceaca04e6559999b48" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="398421a0d7c5bf18300e583c2799b47c2aba7bdfefdd9fce8b92145b309cc183" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="c532b751ed9896e42e11d1ad52306ce35cf293ca7cc5f9c12b7bd7309d1e0828" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="5ddda3384bf213b97c2f3c9b960dc49cd1114b424419a2e8aa7b173871a0ebfb" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="1e875c7dd0f5488c9a2bb2212b5ea38d60d9f2c4f7416d5cf900f9872ed239f8" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="ff5b05cc4174fd22dabe22ea94235090c0a1616c00698c143324b082d2e7580d" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="5e608219e479b0a831844a9cc2e40a910928fa2150425592353f46e9919b42e2" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="89d8dc81b151d8589612e973353b98954c3c17126719f2e240ea3381dc454712" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="4f5d76e839819edc37771b279bfd66837dce89b891667250bea3fbd83182c426" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="4f95eb5e46adf2b5fb81dcb4d250f7ee06f8e108c3ab06d82b1e02d560dc55ab" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="44b9e88fe747009887f77d013e11b31816e4c7e8c799b5f4e8544cffebf48df3" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="925dc6928ab2295f088fed78cfd3002f264182f8b121a3e63ca6c2d56ed2e8fa" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="dc157275d3ab78860965da8702a9cd8b967e02121bbc78383a3e828ac43a4dca" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="12be92518f07793621e86787e1af8a83ebdf23c648eb1bc03f9b25f2dae78e33" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="01b339253359f79af094eed7cd3d251e964ded9b033bac9ce0e177037de23a12" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="90bdcf4720c7f1654916f685409f5c6bef9f7610d8592d6c3f58c9ebdec9f776" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="879a4fa8eaa6e09b9f7358813a5f718673a722a95f03556ea80aebae40767789" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="54c35d51182ef5f0f9b302784d9f29df84d15f448a1564159df54c3ec2d3b6c4" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="dd8bad133c41867c51f16693f6ddf4fa8c3187794191981e53b5ebdf2ce2cebd" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="7183e0be06a4e977988be970d0cef9fa78412da7b6f1dd2cca885e3aeb09d6b7" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="1c7a513d304455096b4ac0b2246fceb2418ee0e3eba107c64271f0e54400d477" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="acc35cbd52949b55f96bd5de7866b820ff44ea016809b9ee86b89f53b369a32a" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="ca2c67c76dfa6381a9a9800531d1013a8e830dc3d12ca8473760817145d57e08" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="6f8b780e6c7d5c0d28f7bc99c3542f12fcaccb29654f14dd9904437ef5b9de82" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="749fc4bcf83cd7003b791e0492926c6771b5469308dc193f1732f3fe03f4d681" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="b2768eb00a46ec886b786474363722596802ee2e9f53243c405a40d515967b69" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="e70e0ebeb45c2a4f32f5edea00b95a5386880f91723b338280af2f493af05106" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="5bc09d732c8dd7a46052b5d8537e9162f552f8e2c19976824b5495a7f3f20bf6" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="12480c60cca47c30acb37150033143ac6f3912465fc08c2c1eb2026e355847a5" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="444b94fe0357112d46d3fe2e62cfed57bd99bc459ac60710df3f281f1bf3d02f" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="d42e70e164eb2d60cc94b45583e75a1bcd0c9f50c8defd1f05e7230934865ef7" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="7f3480243d9e77de4e2fed2b5b17912582d183976d14b35b00c38fe63bf91a3b" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="8859ee55031e743cc93e5e3c0645f558be8f7deb635931be154050d5164c96a8" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="f8bda6788a14257d9d722a84434f7c9816c342ac502bd0834dcbec9358c4d49b" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="141d36dee32041bcbd3204e6d22513c6db10ec3060f7e652fcbb111f7ca62e7a" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="69940bfb228ef22922717e8ef3dd789e750cf9e72328691c999e4051b9ab6c14" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="17552809144e070f4cc13da246f5be4754525acc0f3cec8aa2dff6203ed15fa2" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="f65ae198394beb1294a1828c808a03af4be3db4b7e968f867ac97cc59ff6d7af" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="d9b780b88c9778ab4ce9914a359d0a665966902454ba65522b0ade6f2e6e3191" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="69763d37e44d2db7a608cc937b43480abf93b5942d1d08af9a3c495e62122a64" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="4078becd9dcb831ea5b7e87d981700cde46f8ea2f38e95c51708c208e2703117" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="508bbe6e51f8e65961ce5dcd405765b6f735045a6ed443b7332dbe2127111db4" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="b8be9fe0a69c5a50a7808a369ce6d3235126cb7509d1a7901ab4e0feb13902e3" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="0f32bdd4c0e177237fbbfe1240fd6ee227b837c837e8bd672e813fbd2e71da20" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="e7f275d48e1c37f6be4659dfd17d058739f7ef6a15ff885d77e97f040dd04ba3" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="b28fb3aa1a2be38e770036c6d326f8444b22f346e7d155b3e8880d2edb3dd203" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="d41bc5432e9885a147569af4cb334cbc11a876271f20917693191894044b066b" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="5eb04f6777419a879d2a35deaf6bd65bc48eaf38c78cb3ca7a6f0809df8bcb01" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="74dd93351e07e05b0b7cc9639ba4c8dc47667349cbe7555f5786d9ed7e6d7a88" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="3e910ceac8ec36a41fb9aaa655fe36f6cebfaee3659cf2574f75645b69485a75" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="8de97a87a5870d28b33f077c71437ea0dc90eccf0902bb8dfb1a89a115140b9b" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="29ef60c7d984a7eba0e13fb610e4823d96fb5dbba5043f02de4bbda7a4da6221" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="ba96c46ad80ab663af322f7e2c5e35d2d16b78436292e60fe6e5546d69703725" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="c179bf3cd821a33c7482f8dd3bd52e920d204a17534f7a0fd7fd99cfab15af51" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="3f4a9690fbd73bb1ed59b5126d045f28dfa3766eb3c28588e90ae495ae9d4623" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="6cc1f7f9fe5ba0afa7bced7303388d4e6b4e4dcac22d3b05daf09465c497a44e" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="f8085003a0512463e83531ad61e342994589c0577b5f8cc965343b5770e7ef04" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="05fc14111bb192a0a30371ebbef8e141cf504f129da53e2bcab5fb3f56f62f8d" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="182f41a89a5f5ea5080b6585761bee9bca7b27aad3c4add940d7b4fcbe808749" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="73bcc9a8d9ea7eed9be166f8743fdcb70a4332e0460952b3b0e64d26d2186130" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="f2dfe10d650088dca7d05002dbcd1052532b921edf9db15c68b69a6c658e92a0" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="66c39569c9ad9b87d30a4f5b435f9b3e0431aae4a90d2c65876fa47e20c2e978" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="d0c0f3089ceacc0ba7dfbdc30b8ba886a00768856df046292c112d69977a8d8e" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="a2f1e25a5ef48eaac034374d69bf579da3c0b30adc84bf7c236c30ad693baf7c" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="df199c5509906780a5c47912cf7ae163b918277eeb778717fdd22fa13c0a54f2" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="60a6d5509fcdc92a9b6f8fe3f52fea47ac5ab4bf6d02a6c455a372f5593c0404" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="b82ed3197a5a7774b1c9bf250c12ed1834667c7899d8bbe5c62880493a24e227" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="cfa536e7eec04f13b1861856eb9ff89a441dea79c2d4f8f8df10a1e60c3f01c9" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="03b7ea286c23414eb97e63c9384d826c0f860265b6eb4be2fc46be89ebe4df0b" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="c0b6b898aa08503791e785bbf7e88a360ae5d391177e7bf488a7c8368d24b24e" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="022cfb988be9285a8b0a10eff0360469dd086d137a4ff8a86ec5cf967bc75569" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="a83fbd890b21c9d40c8b095cfd8fe66496bb86ba9680f906b4d596f8536e1127" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="a5254ec62c4f666adf82ff7afdde9cd0bbfb44423bd9ee1fe5fe3453c02603d6" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="d7b60b521ef9a217403256599c1fe1864f046a9a4212cfca8a6f04c0d6057216" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="7b6c333ce27cb03c837597525d8c45c0dbe019b98f30bbb6c7e26205828bc412" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="387583a3a0aad8ecb49271949b62d17f14267e2d12de4b8e32b59f9623510b4b" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="50420f7c8243f0b299199ea8f1ef3032e635423f0c274b754f6eb294696af22d" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="9aea4d6cdad1454c293d34c20ba33119df3514b0af28c08b118f42039b9067c6" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="c615119fd243c58c8a93ffc0fc240c25629b7de7859b09ad5d57bd57a541c09a" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="a03875b04ad7eaededecb0db23c05a8cf80aa66bd0bea64edc9cfa5f5ad79427" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="1fbce4bf8a42ef578d43e480280470c60c84c1f00208735054459da4ddebbf1e" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="53036556e0edabba01600961be7327bf578c58c35bfa7bada23344f94a1cc568" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="e41e93124500b9ebcd044c744082adea584957d535ce87aca342617cde6ac111" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="29e9bbb362eae397c817d28bf609ec536232de1c5767330705fb37bcb91461f0" name="libvirt-python" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="3.el7_4.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 1.3.5-1" date="1465387200">- Rebased to libvirt-python-1.3.5 (rhbz#1286680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.0.0-1" date="1467374400">- Rebased to libvirt-python-2.0.0 (rhbz#1286680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.0.0-2" date="1470052800">- Fix crash in storage pool refresh callback (rhbz#1354271)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.5.0-1" date="1481025600">- Rebased to libvirt-python-2.5.0 (rhbz#1382642)
- The rebase also fixes the following bugs:
    rhbz#1377071</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.0.0-1" date="1486468800">- Rebased to libvirt-python-3.0.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.1.0-1" date="1488542400">- Rebased to libvirt-python-3.1.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-1" date="1491220800">- Rebased to libvirt-python-3.2.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-2" date="1493812800">- Rebuild libvirt-python (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-3" date="1496836800">- rebuild libvirt-python to pickup new flag for virDomainBlockCopy (rhbz#1459183)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-3.el7_4.1" date="1506945600">- Release the GIL during virDomainGetMemoryStats &amp; virDomainGetDiskErrors (rhbz#1497197)</changelog>
</package>
<package pkgid="d2a350ea97df20b66fb0adec5025753b05bd487deb0daea59f036f1e941b44cf" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="4fe9c2ee0ee2aa1f990bb1330112fe519c8c639fb1197d2a705d2e253a024551" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="28630d81eb5b69e84742e6f2d38cbd636bc2a7e9e6fa1d4fb184c0fe78fc1d8d" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="45cba71c4e9dffb3cf1e8816749123c708da664912ae50354303084c8df22f8c" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="f9ee707850b786e1903ed89777ce35184fda5da9641f1af0335205cf8c2c20f9" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="396f544e70f6fe0dfada5fb8fbbcb0add691a434a338912109f974fd113bfab4" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="e9ef5c6abd80fdac16d644137ed17666a6f0d49764e78535bcd99c3447b5a6d4" name="libwbclient-devel" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="b22f20034ebd6e51055992a08fc6b06fb075d49a29c0639523940527ce72774e" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="dbbf911da27459336a6e69a65045ab3907af6d2689ba61de406dbdd01ca41dfa" name="libwbclient-devel" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="1060eb8f4c4d04900e095519604a98262beb09c29e311b7e5db67e5ba8352212" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="f4157e16e25c1308f28aad8761d9a09c1106fec3d4a32872076a4af3a379fbb3" name="libwbclient-devel" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="03e032865a7ef6a32cbdc9423e5b2b9f34848704eb087f4af4141903c5c6fde1" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="7c899787eb96bce6830a5a995a9ce585954d3da41f19e44e97d8162e4f1022c5" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20170606" rel="57.gitc990aae.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="b4289bb7cd0e0839c4ecaaaee9e9235dbcc330cd73761ebb0a04610372bc19ac" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20170606" rel="58.gitc990aae.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="01289d6300ca2a795a549afc19295874ba5f36e221d1413d929f488bcd72666f" name="linuxptp" arch="x86_64">
  <version epoch="0" ver="1.8" rel="3.el7_4.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.3-1" date="1375444800">- update to 1.3</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-1.20140718gitbdb6a3" date="1409745600">- update to 20140718gitbdb6a3 (#1108795, #1059039)
- fix PIE linking (#1092537)
- replace hardening build flags with _hardened_build
- include simulation test suite</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-2.20140718gitbdb6a3" date="1413288000">- add timemaster (#1085580)
- send peer messages to correct address
- make NTP SHM segment number configurable
- update UDS handling to allow running multiple ptp4l/phc2sys instances
- fix warnings from static analysis</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-3.20140718gitbdb6a3" date="1416916800">- fix resetting of linreg servo (#1165045)
- fix phc2sys automatic mode with multiple interfaces (#1108795)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-1" date="1486468800">- update to 1.8 (#1359311 #1353336)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-2" date="1489492800">- force BMC election when link goes down</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-3" date="1489579200">- fix backport of linkdown patch</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; 1.8-3.1" date="1504872000">- Resolves: #1489425 - Race condition in phc2sys</changelog>
</package>
<package pkgid="56e0f69d5ffc3a25398f1ec773772b7fa6b2e12b460f25481b42a9efe57462b8" name="log4j" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="16.el7_4"/>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.2.17-7" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.2.17-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
</package>
<package pkgid="9f22aa5eb4d14b134a1da848a8705f548dfbe27055b1c685c8bff66546c5b1a0" name="log4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="16.el7_4"/>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.2.17-7" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.2.17-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
</package>
<package pkgid="a57b9d079a17a2b7c6b5c9e4c204f471e003b8934d576edab44e382be194a1f0" name="log4j-manual" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="16.el7_4"/>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.2.17-7" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.2.17-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
</package>
<package pkgid="85259eec942207a4dd6681674139c63d955b6a9f7ccc0d6203fa79d30dbbce0b" name="lua-guestfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="e9a30c7d84808cd6a12dafca0fc0eb7f4167676aa296d5cfc3a63d3e1846034d" name="mailman" arch="x86_64">
  <version epoch="3" ver="2.1.15" rel="26.el7_4.1"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-19" date="1426593600">- fix #1188043 - set 2775 permission only for /etc/mailman</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-20" date="1426593601">- fix #1107652 - do not install patch backup files in documentation</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-21" date="1433937600">- fix CVE-2015-2775 - directory traversal in MTA transports</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-22" date="1486728000">- Resolves: #1351939 - Mailman 2.1.15 and later crashes on more email</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-23" date="1487764800">- Resolves: #1232749 - fix bad subject of the welcome email when creating list
  using newlist command</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-24" date="1487764801">- Resolves: #1232737 - Fix instances of #!/usr/bin/env python in mailman</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-24.1" date="1518782400">- Resolves: #1545974 -  Fix XSS vulnerability in web UI</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-24.2" date="1519992000">- Resolves: #1545974 -  Add sanitizer to mitigate XSS injection</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26" date="1519992001">- Related: #1545974 - Bump release to make it higher than 7.5</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26.1" date="1519992002">- Related: #1545974 - Add import regular expression module</changelog>
</package>
<package pkgid="2068c5b508b94fd5ffa3d8672cd9ee8e4ae133e632a4ca33b0035b449483cb42" name="mercurial" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="7ba4f8c81b934bb44cff76e962f215f19fb80350d3ae6cef7b59d1ac16657557" name="mercurial-hgk" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="7db4517b0278b4ab8dc8af4d3e7246e496116ba4f811d169bd1c04aadb0352ae" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="22.2.el7"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-15" date="1467201600">- Load CPU microcode update only on supproted systems.
- Resolves: #1307179</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-16" date="1469102400">- Update to upstream 2.1-10. Intel CPU microcode update to 20160714.
- Resolves: #1358047</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-17" date="1480507200">- Move dracut call into posttrans phase.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-18" date="1481889600">- Fix issue with hot microcode cpu reload.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-19" date="1483963200">- Fix broken quoting in ExecStart line.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-20" date="1484740800">- Fix issue with hot microcode cpu reload.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-21" date="1488888000">- Rpm scriptlets should only rebuild the current kernel's initrd.
- Resolves: #1420180</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22" date="1495627200">- Update to upstream 2.1-12. Intel CPU microcode update to 20170511.
- Resolves: #1384218</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.1" date="1500984000">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1474844</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.2" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527358</changelog>
</package>
<package pkgid="2742befbfab1d83cde751d24c48bd016287bbd8dd958fcc84db7cc9f69af6865" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="22.2.sdl7.1"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-15" date="1467201600">- Load CPU microcode update only on supproted systems.
- Resolves: #1307179</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-16" date="1469102400">- Update to upstream 2.1-10. Intel CPU microcode update to 20160714.
- Resolves: #1358047</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-17" date="1480507200">- Move dracut call into posttrans phase.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-18" date="1481889600">- Fix issue with hot microcode cpu reload.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-19" date="1483963200">- Fix broken quoting in ExecStart line.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-20" date="1484740800">- Fix issue with hot microcode cpu reload.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-21" date="1488888000">- Rpm scriptlets should only rebuild the current kernel's initrd.
- Resolves: #1420180</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22" date="1495627200">- Update to upstream 2.1-12. Intel CPU microcode update to 20170511.
- Resolves: #1384218</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.1" date="1500984000">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1474844</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.2" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527358</changelog>
</package>
<package pkgid="e27d76db423804f76fb9cb7e5d39682e8d5c6abee464ded181609fbf19c591eb" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="22.5.el7_4"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-18" date="1481889600">- Fix issue with hot microcode cpu reload.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-19" date="1483963200">- Fix broken quoting in ExecStart line.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-20" date="1484740800">- Fix issue with hot microcode cpu reload.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-21" date="1488888000">- Rpm scriptlets should only rebuild the current kernel's initrd.
- Resolves: #1420180</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22" date="1495627200">- Update to upstream 2.1-12. Intel CPU microcode update to 20170511.
- Resolves: #1384218</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.1" date="1500984000">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1474844</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.2" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527358</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.3" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1531453</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.4" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533971</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.5" date="1516017600">- Use right upstream source for revert
- Resolves: #1533971</changelog>
</package>
<package pkgid="fd2bdbd622325e536e17c79439a9e51f15170c680929eed1323b07a3dd18fbfd" name="mod_dav_svn" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="8d0a3ba1e56a5b38a06b88a549f3cb2e90755075f1e47116bb11c2ae160fae8c" name="mod_fcgid" arch="x86_64">
  <version epoch="0" ver="2.3.9" rel="4.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; 2.3.7-2" date="1335960000">- Use 10- prefix for conf file in conf.modules.d with httpd ≥ 2.4
- Use _httpd_confdir throughout</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.7-3" date="1335960001">- Make %files list more explicit</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.7-4" date="1341403200">- Move tmpfiles.d config from %{_sysconfdir} to %{_prefix}/lib</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; 2.3.7-5" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; 2.3.7-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.9-1" date="1381233600">- Update to 2.3.9
  - SECURITY: Fix possible heap buffer overwrite (CVE-2013-4365)
  - Add experimental cmake-based build system for Windows
  - Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA
    Authenticator/Authorizor/Access directives' command line argument, as
    currently documented (PR#51194)
  - Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
    assignments) (PR#51657)
  - Conform script response parsing with mod_cgid and ensure no response body
    is sent when ap_meets_conditions() determines that request conditions are
    met
  - Improve logging in access control hook functions
  - Avoid making internal sub-requests and processing Location headers when in
    FCGI_AUTHORIZER mode, as the auth hook functions already treat Location
    headers returned by scripts as an error since redirections are not
    meaningful in this mode
  - Revert fix for PR#53693, added in 2.3.8 but undocumented
  - Fix issues with a minor optimization added in 2.3.8</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.3.9-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.9-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.3.9-4.1" date="1508155200">- Resolves: #1501307 - mod_fcgid cause Segmentation fault error while doing
  large file uploads over HTTPS</changelog>
</package>
<package pkgid="70cfc34f1ea69a4d49760b311cf050f063593574418f7b79ef8724131b996719" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-59" date="1489406400">- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines
  are broken during buffer resize</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
</package>
<package pkgid="01dd680efc6757488ae52f0d2984c04889af6b6c6258fbcebc27ae8d84d64068" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
</package>
<package pkgid="51e88f8f314d8634bce3f2e8eb5c796f7f037f0b01e2d01f7018e5118255a212" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
</package>
<package pkgid="fa40ef5cfe928d472dcb4987165b09da27eef1c412a17dabcbf5f4c83a167fad" name="mod_nss" arch="x86_64">
  <version epoch="0" ver="1.0.14" rel="10.el7_4.1"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 1.0.14-2" date="1467115200">- mod_nss sets r-&gt;user in fixup even if it was long ago changed
  by other module (#1347298)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-3" date="1470657600">- Clean up semaphore in nss_pcache on shutdown (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-4" date="1470744000">- Update clean semaphore patch to not close pipe twice and to
  shutdown NSS database (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-5" date="1470830400">- Update clean semaphore patch to not free the pinList twice.
  (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-6" date="1474459200">- Check the NSS certificate database directory for read permissions
  by the Apache user. (#1312583)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-7" date="1474459201">- Add the permission patch to the repository (#1312583)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-8" date="1487851200">- Fail start start when there are invalid Protocols defined (#1389114)
- Handle group membership when testing NSS database filesystem
  permissions (#1395300)
- Add OCSP cache tuning directives (#1392582) 
- Don't share mod_nss NSS database with nss_pcache (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-9" date="1494417600">- Update nss_pcache.8 to drop directory and prefix options (#1382102)

- Don't share mod_nss NSS database with nss_pcache (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-10" date="1494417601">- Apply the nss_pcache man page patch (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-10.1" date="1500465600">- TLS session cache was not working (#1479766)</changelog>
</package>
<package pkgid="0971a6019ffc998ffe46579458d9944546dd9cad885e592a856f01704e2f37fa" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="67.el7_4.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-59" date="1489406400">- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines
  are broken during buffer resize</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
</package>
<package pkgid="e9fe02820d806100e120df8ea73238cfbb5e23e07109476c507a5d30db0c9e05" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="67.el7_4.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
</package>
<package pkgid="2b229fb5dbf07d959ccacf4cfa8f69414c40f544c9ad08081ccf9292fd4dbe09" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="67.el7_4.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
</package>
<package pkgid="b3d9cdc0cdfa2a644e6e5faaa28dcb87b5209182c09a923a0c1db310b48cf634" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-59" date="1489406400">- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines
  are broken during buffer resize</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
</package>
<package pkgid="f1fc327c5cf9a110f1f6195caed1b13be20a01c1a30fb87473fe0ec1709cd98c" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
</package>
<package pkgid="d5fde94c62f7b51a3037c836b6a5cecdbf51da873b3aa681fa99453d6312e294" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
</package>
<package pkgid="968abdddc1c3e1a9a987b75c9f6648cca0a1ad244a13c49e4dfd7070dc5a26d6" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="67.el7_4.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-59" date="1489406400">- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines
  are broken during buffer resize</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
</package>
<package pkgid="dfea61f1ff4b173dc095520edfa9b2bd44fa42d3a23229c0350c85514832761a" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="67.el7_4.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
</package>
<package pkgid="69e0d002a2290e757e1975e0fadcae212436e5f2bfe2a2b561a786755ef377ef" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="67.el7_4.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
</package>
<package pkgid="cf8043e347ea13648c4bae7f300c829ffb70966a710234b217749def13067fad" name="motif" arch="i686">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="a8bf690bddaaf4c6086cdcaedaad7bac576eab2ce63fe6cfb8d7f9ef315c1b71" name="motif" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="51ff32336070435c01b3596a234e99e29fe3c321f6b377ac9ff3f7172256befa" name="motif" arch="i686">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="a2f4fe994b337a9f9ec5832c96f831d022ccd726e4f21932535aba74ed658852" name="motif" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="9c7eb2fdb5231a9825574c1ed6d9471791c874363b6bb4fc099c425ad4a52819" name="motif-devel" arch="i686">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="01e08aee7ec83d229791e971473f03f6064c0858e75e4b2d5e3062001b9e9e98" name="motif-devel" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="28cc6ba0330e99896f04791df44fdfc03765d8ac54ff20bf65b990086c65dc58" name="motif-devel" arch="i686">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="6288d2585d8e26d50b24849c67f16375552981aa972cac3c72d376abed42b4dd" name="motif-devel" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="6173ee11310cd4272468e0b50b1bba3474e09fc022447c2f40b3a6cb3933112e" name="motif-static" arch="i686">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="9b3f2e0ae5ac0a14b5a1a3a18940d0ea4e44c3771a7eec4f443f5e09149f64e8" name="motif-static" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="333f6e7481031096bb157d35b180a00c7670be1642433a82fe9c7a65a399c5e5" name="motif-static" arch="i686">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="7557cfc4e3597d1bf80800efcd127792629f7d0ef1ccedecc7ad263a72de4165" name="motif-static" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="f788dbbe435aa95216182fb8d809989860a266589d8e458de8706fe0340af04c" name="mutter" arch="i686">
  <version epoch="0" ver="3.22.3" rel="12.el7_4"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-4" date="1489492800">- Don't segfault on early exit
- Resolves: #1369073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.3-5" date="1489579200">- Swizzle BGRA buffers to avoid pixel conversions
- Resolves: #1387025</changelog>
  <changelog author="Owen Taylor &lt;otaylor@redhat.com&gt; - 3.22.3-6" date="1489665600">- Add back quad-buffer stereo patches, rebased to 3.22
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-6" date="1489752000">- Recreate build files after modifying templates with the last patch
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-7" date="1493380800">- Fix cally translation of screen coordinates
- Resolves: #1439194</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-8" date="1494936000">- Special-case shaped java windows to fix OpenJDK's compliance test
- Resolves: #1363784</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-9" date="1496923200">- Fix crash when a window closes during Alt+Tab
- Resolves: #1438722</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-10" date="1497441600">- Keep OR windows stacked on top
- Resolves: #1437203</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-11" date="1498478400">- Prevent crash when removing workspace with on-all-workspaces windows
  present (like desktop icons)
- Resolves: #1453065</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.3-12" date="1507636800">- Add support for plain old X device configuration
- Resolves: #1515138</changelog>
</package>
<package pkgid="561ff70e708ed515c2570fc589e50fad73b16a447be0a39a7303964bf55ddb5c" name="mutter" arch="x86_64">
  <version epoch="0" ver="3.22.3" rel="12.el7_4"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-4" date="1489492800">- Don't segfault on early exit
- Resolves: #1369073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.3-5" date="1489579200">- Swizzle BGRA buffers to avoid pixel conversions
- Resolves: #1387025</changelog>
  <changelog author="Owen Taylor &lt;otaylor@redhat.com&gt; - 3.22.3-6" date="1489665600">- Add back quad-buffer stereo patches, rebased to 3.22
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-6" date="1489752000">- Recreate build files after modifying templates with the last patch
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-7" date="1493380800">- Fix cally translation of screen coordinates
- Resolves: #1439194</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-8" date="1494936000">- Special-case shaped java windows to fix OpenJDK's compliance test
- Resolves: #1363784</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-9" date="1496923200">- Fix crash when a window closes during Alt+Tab
- Resolves: #1438722</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-10" date="1497441600">- Keep OR windows stacked on top
- Resolves: #1437203</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-11" date="1498478400">- Prevent crash when removing workspace with on-all-workspaces windows
  present (like desktop icons)
- Resolves: #1453065</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.3-12" date="1507636800">- Add support for plain old X device configuration
- Resolves: #1515138</changelog>
</package>
<package pkgid="fd3985e487a5fc366369844d5e79b847231b32c691e786fb792eff5aa00365dc" name="mutter-devel" arch="i686">
  <version epoch="0" ver="3.22.3" rel="12.el7_4"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-4" date="1489492800">- Don't segfault on early exit
- Resolves: #1369073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.3-5" date="1489579200">- Swizzle BGRA buffers to avoid pixel conversions
- Resolves: #1387025</changelog>
  <changelog author="Owen Taylor &lt;otaylor@redhat.com&gt; - 3.22.3-6" date="1489665600">- Add back quad-buffer stereo patches, rebased to 3.22
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-6" date="1489752000">- Recreate build files after modifying templates with the last patch
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-7" date="1493380800">- Fix cally translation of screen coordinates
- Resolves: #1439194</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-8" date="1494936000">- Special-case shaped java windows to fix OpenJDK's compliance test
- Resolves: #1363784</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-9" date="1496923200">- Fix crash when a window closes during Alt+Tab
- Resolves: #1438722</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-10" date="1497441600">- Keep OR windows stacked on top
- Resolves: #1437203</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-11" date="1498478400">- Prevent crash when removing workspace with on-all-workspaces windows
  present (like desktop icons)
- Resolves: #1453065</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.3-12" date="1507636800">- Add support for plain old X device configuration
- Resolves: #1515138</changelog>
</package>
<package pkgid="b63fb6fc5a3c84e7c48be40743537b1a6ab357f437f6449e698bdad9fb7e7b8f" name="mutter-devel" arch="x86_64">
  <version epoch="0" ver="3.22.3" rel="12.el7_4"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-4" date="1489492800">- Don't segfault on early exit
- Resolves: #1369073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.3-5" date="1489579200">- Swizzle BGRA buffers to avoid pixel conversions
- Resolves: #1387025</changelog>
  <changelog author="Owen Taylor &lt;otaylor@redhat.com&gt; - 3.22.3-6" date="1489665600">- Add back quad-buffer stereo patches, rebased to 3.22
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-6" date="1489752000">- Recreate build files after modifying templates with the last patch
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-7" date="1493380800">- Fix cally translation of screen coordinates
- Resolves: #1439194</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-8" date="1494936000">- Special-case shaped java windows to fix OpenJDK's compliance test
- Resolves: #1363784</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-9" date="1496923200">- Fix crash when a window closes during Alt+Tab
- Resolves: #1438722</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-10" date="1497441600">- Keep OR windows stacked on top
- Resolves: #1437203</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-11" date="1498478400">- Prevent crash when removing workspace with on-all-workspaces windows
  present (like desktop icons)
- Resolves: #1453065</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.3-12" date="1507636800">- Add support for plain old X device configuration
- Resolves: #1515138</changelog>
</package>
<package pkgid="b4aa066109eb4703d850b64179ec24bb5b2fba70d525dd4167abd8d639d730c4" name="nautilus" arch="i686">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="db962b6808e2d807197e56950cd3b49351ef03298e58aacbad624fa3c1e3880d" name="nautilus" arch="x86_64">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="158aada1d80da2e9466efde050fa8addfc5f77cae22e871239fd3d86e98fa7f3" name="nautilus-devel" arch="i686">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="cd19d93fac0640bb34de1808c6bd6d72065236ec0db6af4d8c767a6a38185705" name="nautilus-devel" arch="x86_64">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="3c5d3c39f9253912aa2e203a9e6a8b0a56018286e5abd2cbadedfa599515be4f" name="nautilus-extensions" arch="i686">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="6d8e839d5b8dade056eb32abbc2ab90bcedeab044b9dd1a7e4572a42dcd8d498" name="nautilus-extensions" arch="x86_64">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="dac96e26cd96bff9aa52a6d75155f1eca42da59a87853b80db6a545606fadfc8" name="ncurses" arch="x86_64">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="6075a3f2d7882b574565916ac5022d9b85cad88e6d41e012d89eb75d9b667eff" name="ncurses-base" arch="noarch">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="21c79223c48353b87b9bf689caaf9b6c45458a564da37845a2c1f1c1dda10c12" name="ncurses-devel" arch="i686">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="996ab1d18e6b68d894e0a55f5dbec5151a47956c7693071341610791b57526ca" name="ncurses-devel" arch="x86_64">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="0718b7fa3fae09107d0004f68752aab474f5741d44c7606a4e93ccf7465a5ce1" name="ncurses-libs" arch="i686">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="c37840f45c615f1471ad4fc573a3739bfc05456a297f7b7e60d13dccb0cc22a2" name="ncurses-libs" arch="x86_64">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="2aba00ab9f4d293a202f131019ddc1379195dd894e4be0e006a7c524e93dc28f" name="ncurses-static" arch="i686">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="66d1a4a51b62a50a18cfdac2f5f1334ad9c2bc160646e25bda82642facd10439" name="ncurses-static" arch="x86_64">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="ee5df029fd80fd1b2bd84810210daef69407969a6bc43cc5c6abd4614d1de5b8" name="ncurses-term" arch="noarch">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="929843615d35584178f9f7ec6abc64f61df0915ff4a1d044a5bafcb1836b682b" name="net-snmp" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="9d190c215ff233ebed9d940ade9c445d2780be5a5c3354b69d0a27c98b8dce5d" name="net-snmp-agent-libs" arch="i686">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="32d8db60f67edbd5db5c97de7ea0248f25e7d7e2196740b5564a6e2da39172ef" name="net-snmp-agent-libs" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="d2dd8a344f751cc26af25a763a3c33db22449d711cb20a1f93b8596b2e22ed68" name="net-snmp-devel" arch="i686">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="23eb3699d394532e79989f4482d9d2d6cd6147ee85e1a724dfd868901edf7006" name="net-snmp-devel" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="86c1cacd7d4aca7268daac7bb9078d8c08696741257bec57b3c2e653a2dc6d40" name="net-snmp-gui" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="96bb2eadcf1a6206459a2cb4e0704b38caecdaa6aaba0fe0971c958cb8a7c576" name="net-snmp-libs" arch="i686">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="3e8ef94bb0a1b910a4e9d9ca80f47b190261c82fe518a1ac7c8cf357af3f5662" name="net-snmp-libs" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="be3cb2e7a233d4c76b8a56d35186bb66f6749fa813aca3761c1ea7ec48b2e558" name="net-snmp-perl" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="0b15a8a1fb621244bd9c44d4af1bd321c30401eefa4e80863012aa65cc8a8723" name="net-snmp-python" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="78383027608ea97b8c4e8e0f9cd5d60ed442617080cb6d0dd5a537a6fade7dcc" name="net-snmp-sysvinit" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="bc99e2f8bcd9588c312c8bc6563ffee99594174ee14b78d03b55031a968c4611" name="net-snmp-utils" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="c9528e2a407d25ddde5954d07df8370b63639ef74a6e4a2a06b7fd3ad62347c8" name="nfs-utils" arch="x86_64">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
</package>
<package pkgid="db599abb83ea8f0f01c3aada22d5d5e1840ecd53083efa1b00eaf47a6cc106bb" name="nfs-utils" arch="x86_64">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.2"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.2" date="1519300800">- mount: Fix problems with parsing minorversion= (bz 1547681)</changelog>
</package>
<package pkgid="8ba7ca08e0a8154532c8cff74f61548b27a826d62620d35de64849d037bd7c3d" name="nfs-utils" arch="x86_64">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.3"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.2" date="1519300800">- mount: Fix problems with parsing minorversion= (bz 1547681)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.3" date="1521028800">- mount: move handling of "-t nfs4" into nfs_nfs_version() (bz 1551927)</changelog>
</package>
<package pkgid="2e85385d58731ad6c0d76a4697925621f179c4bdd2fc33e8ef303273114a1b2f" name="nfs-utils" arch="x86_64">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.40" date="1491652800">- gssd: ensure that preferred_realm is non-NULL (bz 1432643)
- mountstats: handle KeyError in accumulate_iostats() (bz 1400106)
- mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1404121)
- sm-notify: ending the grace period early should be configurable (bz 1424599)
- Fixed a couple typos that effected the '--mounts' nfsstat option (bz 1425956)
- Manual page bug: two inaccuracies in nfsd(7) (bz 1432750)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
</package>
<package pkgid="14ce53709f73afaebd5fc5fbe51f0cd72ffbccf2f427cd994f1abac1dc17cc09" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="9fad864ef23bad7b38a6fb6e73f118c497cc6ad0d841b5b74c68b511f09fd7f6" name="nss" arch="i686">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="f7006b13bf594012c5d02c0fa2365892fe1b34da26ff44f5b0cee179db0490cd" name="nss" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="8812d0ffdd22bce7e9d0883e0be6e225249ab5cc2204cd03550ec68959dcf853" name="nss" arch="i686">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="f6a80c2d68871ec4bdc51917d832ce55d086a0ef8d627f4a427c550a91c97a0b" name="nss" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="39ee7516ff87ed16583baae3ec7e77c170bcd9824b0e47c5a967719c95970ee3" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="1f9a06c5d098df4a68ad8d0736dca8859eb78ca9fd19dbc7d4155a71b5999553" name="nss-devel" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="a1234fb952e8a9425b633da368bc440974eec0641ed75d9974f2408af41bd7b3" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="60809d5667d2c4417e9f9e8bae9eeb5458a90715e93bff24689993a75fc502ad" name="nss-devel" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="09523f9a649a99e4166c08a11f180b2d1752d024d39496a3bc5692d1e412d546" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="fe95f52d642c34d072990dda6eb349f016cc92f79cb40cb2d2c44595d9880359" name="nss-pkcs11-devel" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="4bf8df5e6c0d4a395d8a35793e568eaece6ee28cd1a14dbc54a3284318536cc4" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="72e361671844cecfc52e4f816184f6aa32d5f7d8fa16ffb4146ae14103619a9d" name="nss-pkcs11-devel" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="7fd6cf3dcb175cd631ffbc38282b6c7271c094255616bf7332ba76f0e146cf2e" name="nss-softokn" arch="i686">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="52ebbe4b27387d3269f77aaea61942a82a5ace2f3b27878d8fd542b7a342aa76" name="nss-softokn" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="ce3a793d433e50116541b399108d9547a74c227d7d0ee82d37c5810fb819d971" name="nss-softokn-devel" arch="i686">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="709e8688a227e1b7513baaa2a7dde0681ad33012dd48efc61d78d3af5caf401d" name="nss-softokn-devel" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="a329573e5f9608b92b036f857d1c34863d80e0dda0cc90d89d796d54dd49ddcd" name="nss-softokn-freebl" arch="i686">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="6849128a6bb7a6ab9ce0768a27f0c9ddb6824029f6debef6601d2d0c45924568" name="nss-softokn-freebl" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="1118a95a21e1ec9dd7146c3d219efbe12a8dbc38048e8bba52f590ff9cf0c099" name="nss-softokn-freebl-devel" arch="i686">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="bdc59a10a4eec50eacf9b44f07cbe38691c45aa8ed5f43bdabc3b63dc5b7687b" name="nss-softokn-freebl-devel" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="c868de5c91b656b7cf55cf9fb0cad925302bc6c0a0113b6a513d6a7d3eca491c" name="nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="065973c5b88fb6eef148a5cbeab6894d9ec3698053b6b8c8f79efdf33919b1bf" name="nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="a1add85f486d4ac5bda924b9d8ff3d30f64a613f76cf34ec093593989e521361" name="nss-tools" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="e6dc501ef5afeeac7058e2dd93d8fdad21ec055bc0a5c268a4fb5d567bcddd30" name="nss-tools" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="ffefb09703df7df0711f25f43b16982e4bfc1fc466c1253827826351859a02e8" name="nuxwdog" arch="i686">
  <version epoch="0" ver="1.0.3" rel="5.1.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.1-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; - 1.0.1-9" date="1407931200">- Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; - 1.0.1-10" date="1412078400">- Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch
- reverted the previous change.  ppc64le now removed from ExcludeArch</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.2-1" date="1429704000">- Allow passwords to be retrieved post-init phase
- Fix null termination issue on returned stored passwords</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-1" date="1431259200">- Add systemd support</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-2" date="1434542400">- Resolves: rhbz#1229817 - Re-enable builds for ppc64/ppc64le/s390x</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-4" date="1447848000">- Resolves: rhbz#1283338 - Use java-headless instead</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-5" date="1466769600">- Resolves: rhbz#1283272 - Move perl bindings to a subpackage</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-5.1" date="1518523200">- Resolves: rhbz#1503753 - nuxwdog is cutting off long ExeArgs
- Resolves: rhbz#1534030 - add option to set process uid</changelog>
</package>
<package pkgid="52a95a910525d7d882eb40fcaa15bfcde86ec84a25319f2963742ca83288010e" name="nuxwdog" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="5.1.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.1-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; - 1.0.1-9" date="1407931200">- Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; - 1.0.1-10" date="1412078400">- Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch
- reverted the previous change.  ppc64le now removed from ExcludeArch</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.2-1" date="1429704000">- Allow passwords to be retrieved post-init phase
- Fix null termination issue on returned stored passwords</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-1" date="1431259200">- Add systemd support</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-2" date="1434542400">- Resolves: rhbz#1229817 - Re-enable builds for ppc64/ppc64le/s390x</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-4" date="1447848000">- Resolves: rhbz#1283338 - Use java-headless instead</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-5" date="1466769600">- Resolves: rhbz#1283272 - Move perl bindings to a subpackage</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-5.1" date="1518523200">- Resolves: rhbz#1503753 - nuxwdog is cutting off long ExeArgs
- Resolves: rhbz#1534030 - add option to set process uid</changelog>
</package>
<package pkgid="40a4cc895f93e37d2cb91974c7bfddeb7c7a619c90ace717814cc6be6cc9c2ba" name="nuxwdog-client-java" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="5.1.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.1-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; - 1.0.1-9" date="1407931200">- Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; - 1.0.1-10" date="1412078400">- Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch
- reverted the previous change.  ppc64le now removed from ExcludeArch</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.2-1" date="1429704000">- Allow passwords to be retrieved post-init phase
- Fix null termination issue on returned stored passwords</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-1" date="1431259200">- Add systemd support</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-2" date="1434542400">- Resolves: rhbz#1229817 - Re-enable builds for ppc64/ppc64le/s390x</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-4" date="1447848000">- Resolves: rhbz#1283338 - Use java-headless instead</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-5" date="1466769600">- Resolves: rhbz#1283272 - Move perl bindings to a subpackage</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-5.1" date="1518523200">- Resolves: rhbz#1503753 - nuxwdog is cutting off long ExeArgs
- Resolves: rhbz#1534030 - add option to set process uid</changelog>
</package>
<package pkgid="04e9d584b806c8f1fbfcddcf405dbd03d30410559aa4f7b15b5bd3df2b159296" name="nuxwdog-client-perl" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="5.1.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.1-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; - 1.0.1-9" date="1407931200">- Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; - 1.0.1-10" date="1412078400">- Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch
- reverted the previous change.  ppc64le now removed from ExcludeArch</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.2-1" date="1429704000">- Allow passwords to be retrieved post-init phase
- Fix null termination issue on returned stored passwords</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-1" date="1431259200">- Add systemd support</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-2" date="1434542400">- Resolves: rhbz#1229817 - Re-enable builds for ppc64/ppc64le/s390x</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-4" date="1447848000">- Resolves: rhbz#1283338 - Use java-headless instead</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-5" date="1466769600">- Resolves: rhbz#1283272 - Move perl bindings to a subpackage</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-5.1" date="1518523200">- Resolves: rhbz#1503753 - nuxwdog is cutting off long ExeArgs
- Resolves: rhbz#1534030 - add option to set process uid</changelog>
</package>
<package pkgid="ded110154458ac5fce523698c9441349aff3079be2fee14e789fe3bd338654b7" name="nuxwdog-devel" arch="i686">
  <version epoch="0" ver="1.0.3" rel="5.1.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.1-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; - 1.0.1-9" date="1407931200">- Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; - 1.0.1-10" date="1412078400">- Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch
- reverted the previous change.  ppc64le now removed from ExcludeArch</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.2-1" date="1429704000">- Allow passwords to be retrieved post-init phase
- Fix null termination issue on returned stored passwords</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-1" date="1431259200">- Add systemd support</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-2" date="1434542400">- Resolves: rhbz#1229817 - Re-enable builds for ppc64/ppc64le/s390x</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-4" date="1447848000">- Resolves: rhbz#1283338 - Use java-headless instead</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-5" date="1466769600">- Resolves: rhbz#1283272 - Move perl bindings to a subpackage</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-5.1" date="1518523200">- Resolves: rhbz#1503753 - nuxwdog is cutting off long ExeArgs
- Resolves: rhbz#1534030 - add option to set process uid</changelog>
</package>
<package pkgid="e7e45b1350fb1b4e9bce37e34c35d1425bfa99147ee126f333886fb4e83d6e97" name="nuxwdog-devel" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="5.1.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.1-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; - 1.0.1-9" date="1407931200">- Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; - 1.0.1-10" date="1412078400">- Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch
- reverted the previous change.  ppc64le now removed from ExcludeArch</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.2-1" date="1429704000">- Allow passwords to be retrieved post-init phase
- Fix null termination issue on returned stored passwords</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-1" date="1431259200">- Add systemd support</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-2" date="1434542400">- Resolves: rhbz#1229817 - Re-enable builds for ppc64/ppc64le/s390x</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-4" date="1447848000">- Resolves: rhbz#1283338 - Use java-headless instead</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-5" date="1466769600">- Resolves: rhbz#1283272 - Move perl bindings to a subpackage</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-5.1" date="1518523200">- Resolves: rhbz#1503753 - nuxwdog is cutting off long ExeArgs
- Resolves: rhbz#1534030 - add option to set process uid</changelog>
</package>
<package pkgid="1674cf411fc98acd817cfaa9ae237843f8b275233081103da8383866b7dc1b7f" name="ocaml-libguestfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="6cdf3cf7bcff82abe42f8cf8a5d65a87c238cbea564e49bddf0e99aebb3bb7af" name="ocaml-libguestfs-devel" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="3e8387afe8feb5a230911889827fea9dc9012c8e5d8faaa44b82df9dce5de27c" name="oci-register-machine" arch="x86_64">
  <version epoch="1" ver="0" rel="3.11.1.gitdd0daef.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.6.git31bbcd2" date="1468324800">- build with golang &gt;= 1.6.2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.7.git31bbcd2" date="1468324801">- remove obsoletes</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.8.gitaf6c129" date="1472126400">- Resolves: #1370289 - ship config file to enable/disable
oci-register-machine
- built commit af6c129</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.9.gitaf6c129" date="1472558400">- bump release tag for extras-rhel-7.3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.10.gitfcdbff0" date="1476792000">- Resolves: #1386320
- built commit fcdbff0</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.11.gitdd0daef" date="1481716800">- Resolves: #1404397 - rebase to latest upstream
- built commit dd0daef</changelog>
  <changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; - 1:0-3.8.gitbb20b00" date="1489492800">- Re-add epoch for RHEL.</changelog>
  <changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; - 1:0-3.9.gitbb20b00" date="1489492801">- Build on all available arches</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0-3.11.gitdd0daef" date="1490011200">- rebase to dd0daef</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-3.11.1.gitdd0daef" date="1490616000">- rebuild for all arches on 7.4</changelog>
</package>
<package pkgid="c46841962b60ba7085f7f668b156dd8b690fef2baf804d705d65a74e8dbd3686" name="oci-register-machine" arch="x86_64">
  <version epoch="1" ver="0" rel="3.13.gitcd1e331.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.8.gitaf6c129" date="1472126400">- Resolves: #1370289 - ship config file to enable/disable
oci-register-machine
- built commit af6c129</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.9.gitaf6c129" date="1472558400">- bump release tag for extras-rhel-7.3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.10.gitfcdbff0" date="1476792000">- Resolves: #1386320
- built commit fcdbff0</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.11.gitdd0daef" date="1481716800">- Resolves: #1404397 - rebase to latest upstream
- built commit dd0daef</changelog>
  <changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; - 1:0-3.8.gitbb20b00" date="1489492800">- Re-add epoch for RHEL.</changelog>
  <changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; - 1:0-3.9.gitbb20b00" date="1489492801">- Build on all available arches</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0-3.11.gitdd0daef" date="1490011200">- rebase to dd0daef</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-3.11.1.gitdd0daef" date="1490616000">- rebuild for all arches on 7.4</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-3.12.gitcbf1b8f" date="1501070400">- Resolves: #1462296
- built commit cbf1b8f</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0-3.13.gitcd1e331" date="1505995200">- rebased to cd1e331b78273c9b87d737f46f8d0917b72c546d</changelog>
</package>
<package pkgid="df446ab2b88f1996e19077a120a113399a2c33bb2b0bd3c4830f86b0f8d9568d" name="oci-register-machine" arch="x86_64">
  <version epoch="1" ver="0" rel="3.14.gitcd1e331.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.9.gitaf6c129" date="1472558400">- bump release tag for extras-rhel-7.3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.10.gitfcdbff0" date="1476792000">- Resolves: #1386320
- built commit fcdbff0</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.11.gitdd0daef" date="1481716800">- Resolves: #1404397 - rebase to latest upstream
- built commit dd0daef</changelog>
  <changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; - 1:0-3.8.gitbb20b00" date="1489492800">- Re-add epoch for RHEL.</changelog>
  <changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; - 1:0-3.9.gitbb20b00" date="1489492801">- Build on all available arches</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0-3.11.gitdd0daef" date="1490011200">- rebase to dd0daef</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-3.11.1.gitdd0daef" date="1490616000">- rebuild for all arches on 7.4</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-3.12.gitcbf1b8f" date="1501070400">- Resolves: #1462296
- built commit cbf1b8f</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0-3.13.gitcd1e331" date="1505995200">- rebased to cd1e331b78273c9b87d737f46f8d0917b72c546d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-3.14.gitcd1e331" date="1511352000">- Resolves: #1514511</changelog>
</package>
<package pkgid="eac7777465bb41c56d728cbfd10d866a5a0d1637d368778cfe0dd50e5def8a2a" name="oci-register-machine" arch="x86_64">
  <version epoch="1" ver="0" rel="6.git2b44233.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.11.gitdd0daef" date="1481716800">- Resolves: #1404397 - rebase to latest upstream
- built commit dd0daef</changelog>
  <changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; - 1:0-3.8.gitbb20b00" date="1489492800">- Re-add epoch for RHEL.</changelog>
  <changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; - 1:0-3.9.gitbb20b00" date="1489492801">- Build on all available arches</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0-3.11.gitdd0daef" date="1490011200">- rebase to dd0daef</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-3.11.1.gitdd0daef" date="1490616000">- rebuild for all arches on 7.4</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-3.12.gitcbf1b8f" date="1501070400">- Resolves: #1462296
- built commit cbf1b8f</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0-3.13.gitcd1e331" date="1505995200">- rebased to cd1e331b78273c9b87d737f46f8d0917b72c546d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-3.14.gitcd1e331" date="1511352000">- Resolves: #1514511</changelog>
  <changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; - 0-5.13.git" date="1515067200">- Disable this hook by default.
- Not many people are using it, and it is causing some issues with Docker.</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-6.git2b44233" date="1517486400">- built commit 2b44233</changelog>
</package>
<package pkgid="055bcb93e53e514db01f8702807412e69c8f191d4b30d4765da2c1bb34d02ba5" name="oci-systemd-hook" arch="x86_64">
  <version epoch="1" ver="0.1.12" rel="1.git1e84754.el7"/>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.4-10.git5db667f" date="1486036800">- oci-systemd-hook: do not fail if /run/secrets does not exist
- Fix compiler -Wall -Wextra issues</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.5-1.git16f7c8a" date="1486555200">- Fix mounting of /var/log/journal inside of the container</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.6-1.git16f7c8a" date="1488801600">- Reimplement systemd handling.
- Remove docker path from systemdhook</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.7-1.gitfe22236" date="1490788800">- rh-ulrich-o - Patch to allocate configData dynamically</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.8-1.gitd899a8e" date="1496750400">- Fixes for running with user namespace</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-2.rhel74..gitd899a8e" date="1496836800">- modify release tag to clearly indicate rhel74</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-3.1.gite533efa" date="1497441600">- built commit e533efa</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-4.1.gite533efa" date="1497441601">- correct date in previous entry</changelog>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 1:0.1.8-5.1.git1e84754" date="1500552000">- rebased to 1e84754af7488331ee0353e6100ee2066defec23</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.12-1.git1e84754" date="1502193600">- Resolves: #1479510
- sync version number with configure.ac</changelog>
</package>
<package pkgid="128ba9913f52cd2620c4caf16890b23e5cd0f99e3a5a0a3fdf1254e827c36762" name="oci-systemd-hook" arch="x86_64">
  <version epoch="1" ver="0.1.14" rel="1.git1ba44c6.el7"/>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.5-1.git16f7c8a" date="1486555200">- Fix mounting of /var/log/journal inside of the container</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.6-1.git16f7c8a" date="1488801600">- Reimplement systemd handling.
- Remove docker path from systemdhook</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.7-1.gitfe22236" date="1490788800">- rh-ulrich-o - Patch to allocate configData dynamically</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.8-1.gitd899a8e" date="1496750400">- Fixes for running with user namespace</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-2.rhel74..gitd899a8e" date="1496836800">- modify release tag to clearly indicate rhel74</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-3.1.gite533efa" date="1497441600">- built commit e533efa</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-4.1.gite533efa" date="1497441601">- correct date in previous entry</changelog>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 1:0.1.8-5.1.git1e84754" date="1500552000">- rebased to 1e84754af7488331ee0353e6100ee2066defec23</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.12-1.git1e84754" date="1502193600">- Resolves: #1479510
- sync version number with configure.ac</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.14-1.git1ba44c6" date="1505995200">- rebase to 1ba44c624342f601c45097db2abeb4d01f6b3053</changelog>
</package>
<package pkgid="024aef34a48a5926ac433ed0891959fa2037e071e0e72936645215fee78f6966" name="oci-systemd-hook" arch="x86_64">
  <version epoch="1" ver="0.1.14" rel="2.git9b1e622.el7"/>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.6-1.git16f7c8a" date="1488801600">- Reimplement systemd handling.
- Remove docker path from systemdhook</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.7-1.gitfe22236" date="1490788800">- rh-ulrich-o - Patch to allocate configData dynamically</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.8-1.gitd899a8e" date="1496750400">- Fixes for running with user namespace</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-2.rhel74..gitd899a8e" date="1496836800">- modify release tag to clearly indicate rhel74</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-3.1.gite533efa" date="1497441600">- built commit e533efa</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-4.1.gite533efa" date="1497441601">- correct date in previous entry</changelog>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 1:0.1.8-5.1.git1e84754" date="1500552000">- rebased to 1e84754af7488331ee0353e6100ee2066defec23</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.12-1.git1e84754" date="1502193600">- Resolves: #1479510
- sync version number with configure.ac</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.14-1.git1ba44c6" date="1505995200">- rebase to 1ba44c624342f601c45097db2abeb4d01f6b3053</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.14-2.git9b1e622" date="1512993600">- rebased to 9b1e622c86cf738b404f89ee405803a0338ae9d7</changelog>
</package>
<package pkgid="0d68b85c7fe49e89a0ecd5e5a568440044cce898e03c4ec7d80ac30f97c7e0e1" name="oci-systemd-hook" arch="x86_64">
  <version epoch="1" ver="0.1.15" rel="2.gitc04483d.el7"/>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.8-1.gitd899a8e" date="1496750400">- Fixes for running with user namespace</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-2.rhel74..gitd899a8e" date="1496836800">- modify release tag to clearly indicate rhel74</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-3.1.gite533efa" date="1497441600">- built commit e533efa</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-4.1.gite533efa" date="1497441601">- correct date in previous entry</changelog>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 1:0.1.8-5.1.git1e84754" date="1500552000">- rebased to 1e84754af7488331ee0353e6100ee2066defec23</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.12-1.git1e84754" date="1502193600">- Resolves: #1479510
- sync version number with configure.ac</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.14-1.git1ba44c6" date="1505995200">- rebase to 1ba44c624342f601c45097db2abeb4d01f6b3053</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.14-2.git9b1e622" date="1512993600">- rebased to 9b1e622c86cf738b404f89ee405803a0338ae9d7</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.15-1.git" date="1513857600">- Fix issue with oci-systemd-hook running in user namespaces
- fix json file to run container with proper stage field.</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.15-2.gitc04483d" date="1517486400">- rebase to c04483d32aaad351da14b3b42dfe1e9e69ffa974</changelog>
</package>
<package pkgid="60c194b1a53548a06cebc2c5fae6d6b1f33a5a149d5b18a4bb86054ed55c0617" name="oci-umount" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="55.gitc4618fb.el7"/>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 2:1.12.6-46.git1680dd8" date="1500465600">- rebased runc to 79c3939053c870fbb4de5484d98640d5ba028ef4, #1471803</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-47.git0fdc778" date="1500465601">- Resolves: #1471218
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 4f960ae</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-48.git0fdc778" date="1500552000">- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-49.git0fdc778" date="1500984000">- changed permissions of /var/lib/docker and /etc/sysconfig/docker-storage, #1473785</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-50.git0fdc778" date="1501675200">- Resolves: #1428142, #1454371, #1454420, #1456184, #1470261, #1430905
- Resolves: #1446526, #1450221, #1451474, #1459268, #1461024, #1461071
- Resolves: #1464188, #1466242, #1464933, #1470640
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-51.gitc4618fb" date="1502193600">- Resolves: #1472974
- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-52.gitc4618fb" date="1502798400">- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 299e781</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-53.gitc4618fb" date="1503403200">- Resolves: #1484146
- need container-selinux &gt;= 2:2.21-2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-54.gitc4618fb" date="1503403201">- built oci-umount commit 8377044
- ensure diff between 1.12.6-51 and latest is only container-selinux NVR</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-55.gitc4618fb" date="1503576000">- Resolves: #1477787
- built oci-umount commit 6f0317a</changelog>
</package>
<package pkgid="c7342caa9196f263e365382b03115781089c0c5f14bf51c7b036c25ebce9cf7e" name="oci-umount" arch="x86_64">
  <version epoch="2" ver="2.0.0" rel="1.git299e781.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:2.0.0-1.git299e781" date="1502712000">- initial build as independent package
- obsoletes docker-oci-umount</changelog>
</package>
<package pkgid="6da68cb3c389f0a71e9ada3f4fa22d19d9d39a61ef3f70662372f6923610e597" name="oci-umount" arch="x86_64">
  <version epoch="2" ver="2.3.0" rel="1.git51e7c50.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:2.0.0-1.git299e781" date="1502712000">- initial build as independent package
- obsoletes docker-oci-umount</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:2.2.0-1.gite3fbbfb" date="1508414400">- rebased to e3fbbfb7e4ce04a256ea8f11858a84faa307b7bd</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.3.0-1.git51e7c50" date="1510056000">- rebase to v2.3.0</changelog>
</package>
<package pkgid="efc59afa334ade50dcb01a926df9fc8b5b17543c621b14e23d85e1cab9dbdb5c" name="oci-umount" arch="x86_64">
  <version epoch="2" ver="2.3.1" rel="2.gitbf16163.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:2.0.0-1.git299e781" date="1502712000">- initial build as independent package
- obsoletes docker-oci-umount</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:2.2.0-1.gite3fbbfb" date="1508414400">- rebased to e3fbbfb7e4ce04a256ea8f11858a84faa307b7bd</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.3.0-1.git51e7c50" date="1510056000">- rebase to v2.3.0</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:2.3.1-2.gitbf16163" date="1512993600">- rebased to 2.3.1</changelog>
</package>
<package pkgid="8e9554c34a94ff194a2ddfd8186b93b144471c89849c761314a1495698c8359f" name="oci-umount" arch="x86_64">
  <version epoch="2" ver="2.3.3" rel="3.gite3c9055.el7"/>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 2:1.13-102.git7623f6a" date="1500552000">- fixes according to package review</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.13-103.git7623f6a" date="1501156800">- obsolete with epoch</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:2.0.0-2.gitf90b64c" date="1502971200">- rebased to f90b64c144ff1a126f7c57b32396e8990ca696fd</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:2.2.0-1.git0a4dcd6" date="1505995200">- bump to v2.2.0</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 2:2.2.0-2.git0a4dcd6" date="1505995201">* Thu Sep 21 2017 Dan Walsh &lt;dwalsh@redhat.com&gt; - 2:2.2.0-2.git0a4dcd6
- Add support for multiple configuration files.
  oci-umount will still read config file /etc/oci-umount.conf if it
  exists, but will also read config files in /usr/share/oci-umount/oci-umount.d
  and config files in /etc/oci-umount/oci-umount.d.  If the same file name exists
  in both directories, then oci-umount will only use the content in /ect/oci-umount/oci-umount.d.
- Make Logs less noisy
- Improve logs output, adding containier id, and needed file information
- Add support for specifying submounts PATH/* will unmount all mountpoints 
  under PATH in a container
- Support for oci configuration files to specify when to run the plugin</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 2:2.3.1-1.git51e7c505" date="1510056000">-  Provide a knob log_level to control verbosity of messages</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 2:2.3.2-1.git" date="1513857600">- Fix oci-umount.json to run in stages to support CRI-O</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 2:2.3.3-1.git" date="1516622400">- Support passing of stage via stage environment variable.</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.3.3-2.gite3c9055" date="1517486400">- correct Obsoletes that were messed up probably cause of reusing fedora spec</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.3.3-3.gite3c9055" date="1517486401">- provides: docker-oci-umount = epoch:version-release</changelog>
</package>
<package pkgid="04e83336b977554c966dff6ca967d44d8ae856b670c5172fffc31bbd292eb25a" name="openscap" arch="i686">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="ca9738323a839dd0ffdbce84fe071ebf103cea8887b7e9d9b19a7845aa90855d" name="openscap" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="39e6e07b296259d9e70a6fc24c8cf49d492826ed3970d4bb6a071c6894344529" name="openscap-devel" arch="i686">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="ea71fb3ee477f77cf611a0ddc3c5e503969a639edcd1d62288b864595c72de9d" name="openscap-devel" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="8abc58dfafcdc12dfde9c2e68d334da180c1ee8b831ccd57e2a26fac7437da33" name="openscap-engine-sce" arch="i686">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="e81d66efbb1a3bb15cf6dcc3da16ebd728100a228a99401938a2c73e07db2805" name="openscap-engine-sce" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="6370b9f4e8c79452bd457c04e7646aa3875feaba1bcc4c591591810da39ffa87" name="openscap-engine-sce-devel" arch="i686">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="9f49ceb66d2b6a7c3ccbdcefeb165c43b09c69266ec86cda76e66ab1c613529e" name="openscap-engine-sce-devel" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="ee2efb29e95da0144703cbf5e2104c364fc23a9c1e998c323dea403fda22aabc" name="openscap-extra-probes" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="eb73fc1d96823e3ce4b0a3e5c960b737e7cd2cfea75e00df3be3323ea75624dc" name="openscap-python" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="d2c1989cf571bd157b1b746a4c1bcfe4c36023256e9d7e34b1424ed036e37aa2" name="openscap-scanner" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="85d73856b90f5c7df8c0c636f492368b253ff6bf3341879f309ba78dae971baf" name="openscap-utils" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="6ea09c78b8f2765227d7490bf32eab9c9445740167dfaa9d1dc007f95a6354f3" name="openssh" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="dedb543129860449f7b295eed0556604cb77c1c675f8f0fb82952574a43b4a78" name="openssh" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="592e856a8cea0a6c7980589e665252ed972a7441e3fd782012af582af8d7df37" name="openssh-askpass" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="ecdba5ccb60b04ef119ab9c9995a9bdb7f77d6d851014adce7ad828167fd8298" name="openssh-askpass" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="2455684910aaf8a37d2bb6464ad10443ba9350e8b20cf718e454bd28ec10269b" name="openssh-cavs" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="a0b78480d2826deac5a5104921916c0eba0fa5b29cf2e15cbeaf2bc614dcda05" name="openssh-cavs" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="47ea43f524a00cfa3d2f361493a4f4888d468bdc99700920cab117ee710a60d3" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="9648c67ba66a776de0550a90aa587eb102a423980081be42eefd86b7cfc89d0d" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="b9c8dcc3f11046bb447584620a5fd1e2c99631d13090874a98df5f261cf7d10d" name="openssh-keycat" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="c14b9481280ab50f86045534bee5818af74cec86fe42cc42a58e90929410a981" name="openssh-keycat" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="20cb3d1c8a47d6707d55634e17cf5f9656a663ce40394eeeae278f8fe7318522" name="openssh-ldap" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="995fb17a12710ad6442d62c2608ec72123c88d584c4cc5e5a700bdaf9053432f" name="openssh-ldap" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="9e6317f34dc4cb1dd155dd9186728795385deddfe2a8f5c707b1eba2549ceb30" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="8644b919adeb5f5f484390624c83bb606db3ec56f4a210b085971003d964d0f7" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="219d8d533978e961b1a49350896300cc9f5a5e973fb251cf54228e22d1334c73" name="openssh-server-sysvinit" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="d6fac3e0371df94b743d071b4b61d8f039439c04604fc8b0713b29bd0b78c9df" name="openssh-server-sysvinit" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="22eec3eccd1f98db59dc2198af9c5de4f5a4fe5551f71fce228bc28fab63e392" name="ostree" arch="x86_64">
  <version epoch="0" ver="2017.11" rel="1.el7"/>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.3-2" date="1490788800">- Backport fix for ovl selinux labeling
  Resolves: #1436751</changelog>
  <changelog author="David Marlin &lt;dmarlin@redhat.com&gt;" date="1491480000">- Patch spec to get non-grub archs working again
  Resolves: #1439395</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.3-3" date="1491998400">- Rebuild for 7.4</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-1" date="1493640000">- New release
  Resolves: #1447077</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-2" date="1494244800">- Rebuild for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.6-2" date="1495454400">- New upstream version</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.6-3" date="1496750400">- Add versioned runtime req on glib2 (RHBZ#1371704)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.7-1" date="1497873600">- New upstream version for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 2017.10-2" date="1503316800">- Switch to libcurl
  Resolves: #1444903</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.11-1" date="1506340800">- New upstream version for 7.4.2</changelog>
</package>
<package pkgid="8f9d3bb5e41389567cfa193a0351f91d1c14185b3036a893f5186130874fe04b" name="ostree" arch="x86_64">
  <version epoch="0" ver="2017.14" rel="2.el7"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.3-3" date="1491998400">- Rebuild for 7.4</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-1" date="1493640000">- New release
  Resolves: #1447077</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-2" date="1494244800">- Rebuild for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.6-2" date="1495454400">- New upstream version</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.6-3" date="1496750400">- Add versioned runtime req on glib2 (RHBZ#1371704)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.7-1" date="1497873600">- New upstream version for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 2017.10-2" date="1503316800">- Switch to libcurl
  Resolves: #1444903</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.11-1" date="1506340800">- New upstream version for 7.4.2</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.14-1" date="1512475200">- New upstream version for 7.4.4</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.14-2" date="1512475201">- Rebuild for 7.4</changelog>
</package>
<package pkgid="814ac03c4f608976e4c6fbed00e5234a2ee444aacac01884ef21009024c742cc" name="ostree-devel" arch="x86_64">
  <version epoch="0" ver="2017.11" rel="1.el7"/>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.3-2" date="1490788800">- Backport fix for ovl selinux labeling
  Resolves: #1436751</changelog>
  <changelog author="David Marlin &lt;dmarlin@redhat.com&gt;" date="1491480000">- Patch spec to get non-grub archs working again
  Resolves: #1439395</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.3-3" date="1491998400">- Rebuild for 7.4</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-1" date="1493640000">- New release
  Resolves: #1447077</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-2" date="1494244800">- Rebuild for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.6-2" date="1495454400">- New upstream version</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.6-3" date="1496750400">- Add versioned runtime req on glib2 (RHBZ#1371704)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.7-1" date="1497873600">- New upstream version for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 2017.10-2" date="1503316800">- Switch to libcurl
  Resolves: #1444903</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.11-1" date="1506340800">- New upstream version for 7.4.2</changelog>
</package>
<package pkgid="f7676b8f4ee76d90d2635ae920aa44e24b276977ea37225e81231a3e6ed2b5f7" name="ostree-devel" arch="x86_64">
  <version epoch="0" ver="2017.14" rel="2.el7"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.3-3" date="1491998400">- Rebuild for 7.4</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-1" date="1493640000">- New release
  Resolves: #1447077</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-2" date="1494244800">- Rebuild for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.6-2" date="1495454400">- New upstream version</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.6-3" date="1496750400">- Add versioned runtime req on glib2 (RHBZ#1371704)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.7-1" date="1497873600">- New upstream version for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 2017.10-2" date="1503316800">- Switch to libcurl
  Resolves: #1444903</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.11-1" date="1506340800">- New upstream version for 7.4.2</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.14-1" date="1512475200">- New upstream version for 7.4.4</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.14-2" date="1512475201">- Rebuild for 7.4</changelog>
</package>
<package pkgid="b557aadd6657bcdf3951fb99177c4149495c4b64d0e621296ae64d7e983e0f60" name="ostree-fuse" arch="x86_64">
  <version epoch="0" ver="2017.11" rel="1.el7"/>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.3-2" date="1490788800">- Backport fix for ovl selinux labeling
  Resolves: #1436751</changelog>
  <changelog author="David Marlin &lt;dmarlin@redhat.com&gt;" date="1491480000">- Patch spec to get non-grub archs working again
  Resolves: #1439395</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.3-3" date="1491998400">- Rebuild for 7.4</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-1" date="1493640000">- New release
  Resolves: #1447077</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-2" date="1494244800">- Rebuild for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.6-2" date="1495454400">- New upstream version</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.6-3" date="1496750400">- Add versioned runtime req on glib2 (RHBZ#1371704)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.7-1" date="1497873600">- New upstream version for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 2017.10-2" date="1503316800">- Switch to libcurl
  Resolves: #1444903</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.11-1" date="1506340800">- New upstream version for 7.4.2</changelog>
</package>
<package pkgid="27f5eafc3833d6fb914c57c13101ab24d819002a76a18ee9fd6c74e35df7f434" name="ostree-fuse" arch="x86_64">
  <version epoch="0" ver="2017.14" rel="2.el7"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.3-3" date="1491998400">- Rebuild for 7.4</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-1" date="1493640000">- New release
  Resolves: #1447077</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-2" date="1494244800">- Rebuild for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.6-2" date="1495454400">- New upstream version</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.6-3" date="1496750400">- Add versioned runtime req on glib2 (RHBZ#1371704)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.7-1" date="1497873600">- New upstream version for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 2017.10-2" date="1503316800">- Switch to libcurl
  Resolves: #1444903</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.11-1" date="1506340800">- New upstream version for 7.4.2</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.14-1" date="1512475200">- New upstream version for 7.4.4</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.14-2" date="1512475201">- Rebuild for 7.4</changelog>
</package>
<package pkgid="2f98d1da9a793715290b8f75aad8a6a99cd185a6e800fccb115e2673c1e68965" name="ostree-grub2" arch="x86_64">
  <version epoch="0" ver="2017.11" rel="1.el7"/>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.3-2" date="1490788800">- Backport fix for ovl selinux labeling
  Resolves: #1436751</changelog>
  <changelog author="David Marlin &lt;dmarlin@redhat.com&gt;" date="1491480000">- Patch spec to get non-grub archs working again
  Resolves: #1439395</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.3-3" date="1491998400">- Rebuild for 7.4</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-1" date="1493640000">- New release
  Resolves: #1447077</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-2" date="1494244800">- Rebuild for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.6-2" date="1495454400">- New upstream version</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.6-3" date="1496750400">- Add versioned runtime req on glib2 (RHBZ#1371704)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.7-1" date="1497873600">- New upstream version for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 2017.10-2" date="1503316800">- Switch to libcurl
  Resolves: #1444903</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.11-1" date="1506340800">- New upstream version for 7.4.2</changelog>
</package>
<package pkgid="6efc58d5b1c35c80aaf03660d5ab2c2c3f1276e7ed2fb63f1144b13488a9ef5c" name="ostree-grub2" arch="x86_64">
  <version epoch="0" ver="2017.14" rel="2.el7"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.3-3" date="1491998400">- Rebuild for 7.4</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-1" date="1493640000">- New release
  Resolves: #1447077</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-2" date="1494244800">- Rebuild for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.6-2" date="1495454400">- New upstream version</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.6-3" date="1496750400">- Add versioned runtime req on glib2 (RHBZ#1371704)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.7-1" date="1497873600">- New upstream version for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 2017.10-2" date="1503316800">- Switch to libcurl
  Resolves: #1444903</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.11-1" date="1506340800">- New upstream version for 7.4.2</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.14-1" date="1512475200">- New upstream version for 7.4.4</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.14-2" date="1512475201">- Rebuild for 7.4</changelog>
</package>
<package pkgid="9d2343ae765db4c77031d70f9d8b7d117eee74e57502e1bb362e4d25b9f5bbe6" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="52382a913398eae83ac5b8b6be09a8097433867bdb4c1984aca11e71e3ebd840" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="de6835ffabab6eaf4f2335606c099c9d13caf756c7adab157c8fc72b8c007b0c" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="450f926a4eb6796e1f48d11f9e2c237c9fb04bd09bc1d980eeac999526b5dc71" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="4b1dcf5bfaf3885ecfb1797f4a28d0810d56e7d7ab5edda8959dfde8928fd9a5" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="8160e546277e8b17e927b8e2ed04e53bb9439efc8fdba8f614ecfa3d0b35f9e9" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="1192a751eb7d29083f0a614949797ee6660ef97761030e3c640f5f7d5bf9a315" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="bcd7f9e04bd933a50d0f063fd69e061d3b463c419bebe03392de35d79c66388e" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="8ed65f5e31fea1232abd596fbd68e4048a02ac10b74402970528757ef821c8ba" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="61051a659da03f9c54bcc7f127c64075ab3f395856bedd5669375348b83ae7c1" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="3438f51bd0c042b1f8e41335f1a1b83d602032b69287030b054b902475490634" name="pacemaker-cluster-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="cec294d2a04cc5594614876c92e0fa02a0308dfb0735f6939dc49ac36a43bdda" name="pacemaker-cluster-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="606b558444e0c31280abe6ba811e646026fbaee3f32ba78ffec6f10ebe9d0a6e" name="pacemaker-cluster-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="5445fb0373a19de90a734404df66e5bf88dc5de6b4660ace2aa3818e0a50fa1f" name="pacemaker-cluster-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="9c3791e572285da8d47a96ce694078cb397e555a905ade2f8e72af6de3d65cec" name="pacemaker-cluster-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="bb7a10afd6ba296f0a05dc432a79c78003a84dd87da3a0332d514151de405d35" name="pacemaker-cluster-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="e280c0d70dd940351f45cca79aee63d23d231291ac4886d3c4ea179aae50e37d" name="pacemaker-cluster-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="d952a5bcc7d05b9b6272fcecafff51834475229ccad549ae4dac6804f0006902" name="pacemaker-cluster-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="d3e2252ada1940173a252e64cb7f7b78def6fac43205d5f1ae87ca263504342f" name="pacemaker-cluster-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="2c26d977c9183814509ba686157f89b276232cfdda1ba71bed2bb94a359b0f70" name="pacemaker-cluster-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="79fa3f1b94defceeb7ae765366ce53425bec99e2a022eb163cbf1091f9befd2a" name="pacemaker-cts" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="00163f2c04c278726b465b29c6675ec6ff6b3371b12556bc23d1bd6ca964b030" name="pacemaker-cts" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="386a0c6158ebfe032ef57cca124c3df1a9960698c78fb81e9d405a80ed2c0922" name="pacemaker-cts" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="c43d4d22ccb93f74a646814c5c73d250f13d8e6122bb7d331d6cdb2b5d6a5b27" name="pacemaker-cts" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="2809c58152446b4a1cb9300d9da47f52a32eda0a5af811a522af315c8f59a35e" name="pacemaker-cts" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="bebf5f2942bc3e2d6351f5986e6e3d9647a61cba47cfc4830e1f53fdf5e97b09" name="pacemaker-doc" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="09a478029ea47f97541ef87acc35a56bf3a897b810437b2545e11dd29c1fb9eb" name="pacemaker-doc" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="c208a62b489ad6ea30946b777d4b6b046a0439bea8147a3dc3e28a4a0ec6a564" name="pacemaker-doc" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="8091f6209cabd3a28fb93a8ea234d43478a798cd30d01a73be6e72ca43de7917" name="pacemaker-doc" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="ca97ff894aff85fe78385c4ccb4990e7795023c81a2abfc151a35bdccf585339" name="pacemaker-doc" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="e2e921b8c904b4896dc0077aef97a188ce962667e4f25eb389df39465dcb8da6" name="pacemaker-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="1773d95ed5e9417e376d0cdabd118ee9c2ffc795bc89ede5e51746c57e66f66e" name="pacemaker-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="bccb02e029834f9293bdcfe632894e7d17ef82fafc8d9db05493ffebc150ba5b" name="pacemaker-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="c65c8a89f0081d85b3da46fb789feb2a0371f031b423a50b53ec26fcaf46cbaa" name="pacemaker-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="263b54c177ef2ba0b32c474707df2d96a586823461eda770b6b6b284b2d1e05c" name="pacemaker-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="dad7b643cf3891255ef62b5f8800684333d0e7ef4e2a0072ffe1dd6f4d9852aa" name="pacemaker-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="d00711ad2988fe5f3457f55dae3279cb2c2fc4a2f831ce3e9de21bce189069d7" name="pacemaker-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="d7c263b1e55b157ef795f08420a7d540cc70240698aaa0bfc2fcb82570f957d0" name="pacemaker-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="603dd67294fd32bb22d7ee4c636ca9f667bb6ff36cbe420100800703286f4e7a" name="pacemaker-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="f1e181a57ed7d3f5921e7bd46fe66c0dd00bca6b1b101303a1f9d4166feddcb5" name="pacemaker-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="e6c568154b7739350ca03ded2ee3bf59093fa8771a6db62e3d13f35f5f4a9406" name="pacemaker-libs-devel" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="938920ed7c40dc3e53e424f3f1c49e6cb65a418b29b8eef9b3ec14a389f196c3" name="pacemaker-libs-devel" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="6b1f61b265798521847c7f1da26058aac38cf3139a6c0b48ef9ad10872445816" name="pacemaker-libs-devel" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="9dc86a6f3d77d18a8e01012d3f0dbd198228859de9ea85e8c71d836237e99626" name="pacemaker-libs-devel" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="5d284496516c02ff23dd7ac22943f6e2091f41c910633283415d10b604b68f7d" name="pacemaker-libs-devel" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="18ca32fdd9743456a42f4ab656d5d7a108630b048d856ead0966a19c7c8c35fa" name="pacemaker-libs-devel" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="05b672de22598c235c60a6d2f016b4e15e0beca7471c49099f33d13c5d01b5e6" name="pacemaker-libs-devel" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="995693c196e67e5f18a470309a45f5dc56fffcc06ebcc83d3a5aac5b1351a2be" name="pacemaker-libs-devel" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="9d39998286c58cae4f5bb4f8515bf3f3e1cf88576f23cf4a9cddd62317ae45e0" name="pacemaker-libs-devel" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="1495e53b6088f712a36feab05b549d4d565fc397668083cfd51688c6bff12ee8" name="pacemaker-libs-devel" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="18fd6e95e7c90ae5bd2600f5c0d30f58e96170e40173d9dc08025fa895aeec1a" name="pacemaker-nagios-plugins-metadata" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="899c2cd0fdc4948eb5280ea69fe6fd039308945b920cf60d36c282e21dbdd4fc" name="pacemaker-nagios-plugins-metadata" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="5974eba8eb13bf6eabe1ae0fa976e6f7600d00d09f86c0b06024db79cf747863" name="pacemaker-nagios-plugins-metadata" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="3a97c144a4efad0430f52e5e76979e7b9e128fd43636dd16f0492df8974b3eef" name="pacemaker-nagios-plugins-metadata" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="55f524edd6db57edc2b8de2880ee9c3949bcf3569e971222d3589968a141c0d3" name="pacemaker-nagios-plugins-metadata" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="8a01d76ed86393452ae5fc34f078ffe78cbfcf991b2f843e2419d08b4f982dbf" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="6eddd48bdb7595f8f2375e33818ba9ebb46ec61efe81b7ec3c2b85b7f9086336" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="480002ee718a1968a60c66dc0486ce7e472693ab0304015ca423c97eac77667b" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="aec0d15fca62c26c97101be4997c6179fb709343e7c12c80a049a8f2448b4fe8" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="2e2ecb66d7a911d2ecb284ac827dfb647c432e647928e35ec751a237772a37d7" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="5f7c1f29e1ad5f14bb91bcc1024ea0ccc09af3871b65b445d14eee3d44fd6b33" name="pam_ssh_agent_auth" arch="i686">
  <version epoch="0" ver="0.10.3" rel="1.12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="d75de2a08d6c0ea4c8fda7f3d8fa27980b9d50d34d4222df9e8c30a5afbd97da" name="pam_ssh_agent_auth" arch="x86_64">
  <version epoch="0" ver="0.10.3" rel="1.12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="6929fc15f6cfa9e6a1ed9d6d4c16fd47e7e1767d71fbb36fc6802e5cbb9fd6ec" name="pam_ssh_agent_auth" arch="i686">
  <version epoch="0" ver="0.10.3" rel="1.13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="5bab1c604d293c14306571734e208bc82683f25dcf751972296ca342efed34e9" name="pam_ssh_agent_auth" arch="x86_64">
  <version epoch="0" ver="0.10.3" rel="1.13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="f7af5d163bf52eb1d6f148a5a3c81ab0223cf4a1d141c2f3a23766d01df09db7" name="pcs" arch="x86_64">
  <version epoch="0" ver="0.9.158" rel="6.el7_4.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.156-1" date="1486728000">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1409821 rhbz#1404233 rhbz#1408476 rhbz#1262001 rhbz#1389443 rhbz#1389941 rhbz#1315992 rhbz#1261116 rhbz#1389501 rhbz#1404229 rhbz#1284404 rhbz#1339355 rhbz#1347335 rhbz#1344712 rhbz#1395226 rhbz#1382004 rhbz#1378107 rhbz#1398562 rhbz#1402475 rhbz#1382597 rhbz#1389453 rhbz#1390071 rhbz#1390066 rhbz#1387670 rhbz#1292858 rhbz#1396462 rhbz#1419903 rhbz#1419661</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.156-2" date="1488283200">- Added ppc64le architecture
- Resolves: rhbz#1402573</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.157-1" date="1491825600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1362493 rhbz#1315627 rhbz#1378742 rhbz#1334429 rhbz#1402374 rhbz#1389941 rhbz#1303969 rhbz#1415080 rhbz#1328882 rhbz#1434972 rhbz#1413958</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-1" date="1495540800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1447702 rhbz#1176018 rhbz#1433016 rhbz#1303969 rhbz#1386114 rhbz#1386512 rhbz#1390609 rhbz#1165821 rhbz#1315992 rhbz#1373614 rhbz#1422667 rhbz#1254984</changelog>
  <changelog author="Tomas Jelinek &lt;tojeline@redhat.com&gt; - 0.9.158-2" date="1495800000">- Fixed crash of the `pcs cluster setup` command when the `--force` flag was used
- Fixed crash of the `pcs cluster destroy --all` command when the cluster was not running
- Fixed crash of the `pcs config restore` command when restoring pacemaker authkey
- Fixed "Error: unable to get cib" when adding a node to a stopped cluster
- Resolves: rhbz#1176018</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-3" date="1496232000">- Added option to create not hardened cluster with the `pcs cluster setup` command using the `--no-hardened` flag
- Added option to create not hardened cluster from web UI
- Fixed a crash in the `pcs cluster node add-remote` command when an id conflict occurs
- Fixed creating a new cluster from the web UI
- `pcs cluster node add-guest` now works with the flag `--skipp-offline`
- `pcs cluster node remove-guest` can be run again when the guest node was unreachable first time
- Fixed "Error: Unable to read /etc/corosync/corosync.conf" when running `pcs resource create`([rhbz#1386114])
- Binary data are stored in corosync authkey
- Resolves: rhbz#1284404 rhbz#1373614 rhbz#1165821 rhbz#1176018 rhbz#1386114</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-4" date="1496750400">- Added support for enable and disable in bundles
- New clusters are created with corosync encryption disabled by default
- Flag `--master` is backward compatible in `pcs resource create`
- Resolves: rhbz#1165821 rhbz#1433016 rhbz#1458153</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-5" date="1496923200">- `pcs cluster setup` uses existing pacemaker authkey if it exists
- `pcs resource create` shows only warning when case of remote node is detected
- Resolves: rhbz#1459503</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6" date="1497528000">- It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
- Fixed timeout when cluster setup takes long time in web UI
- It is now mandatory to specify container type in the "resource bundle create" command
- Resolves: rhbz#1447910 rhbz#1284404</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6.el7_4.1" date="1509364800">- `resurce update` no longer exits with an error when the `remote-node` meta attribute is set to the same value that it already has
- Resolves: rhbz#1507399</changelog>
</package>
<package pkgid="a76383d905395d408bbd19bdf80de0e483a08124ab2e771e6254229f1bdaed56" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-685.el7]" date="1497873600">- [mm] enlarge stack guard gap (Larry Woodman) [1452733] {CVE-2017-1000364}
- [mm] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1462267]
- [fs] nfs: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask (Benjamin Coddington) [1449466]
- [hid] hid_wacom: temporaly disable power_supply usage from driver (Aristeu Rozanski) [1458348]
- [drm] mgag200: Fix to always set HiPri for G200e4 V2 (Rob Clark) [1461985]
- [nvme] submit nvme_admin_activate_fw to admin queue (David Milburn) [1456978]
- [netdrv] i40e: set VFs to untrusted mode by default (Stefan Assmann) [1462105]
- [netdrv] tun: use symmetric hash (Jason Wang) [1458645]
- [crypto] qat: copy back iv on completion (Neil Horman) [1446394]
- [crypto] chcr - Fix txq ids (Sai Vemuri) [1457392]
- [crypto] chcr - fix itnull.cocci warnings (Sai Vemuri) [1426189]
- [crypto] chcr - Change flow IDs (Sai Vemuri) [1426189]
- [crypto] chcr - Check device is allocated before use (Sai Vemuri) [1426189]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
</package>
<package pkgid="9312f8b0288927f67b33c2a57227f32e8536058299fabdf3f65b21cf118db99b" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
</package>
<package pkgid="c3716ab901ec36aaf991b797c1d7b986efe5a03a9317dd81ff1de2bba57d46cf" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
</package>
<package pkgid="8bb041949d0521251412499979fdf8d04566239a5d3dd144278f99f0ae48e2e5" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
</package>
<package pkgid="51f1ea07d595d840014041e9a3461b75f12276796ef4bc9ba04edead01ac9f58" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
</package>
<package pkgid="0134cc5f061b61dcd676e7755562be285e967be8178baf5dbe3bed5ce5df57fe" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="e828bb850b2172c8afba29d1a8fa3722b3ed2f97a1ca0d9b1b3af7ad0165cc9c" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
</package>
<package pkgid="1abfb0c6395e497e2d13aaf612959913170f399e46d436ff25bae815d4f130c3" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
</package>
<package pkgid="e3948c7143b1c553bcccc2257836bba399d0b9acc8fe1f36c9927894bcd6a33a" name="perl-Git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="31dd2afdc4073dc0ee7863b10e32ea1b26467c129c8a9106accac39e10aefa27" name="perl-Git-SVN" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="6e374f2435b36719f168fb7f3b6df6261b42e67d708f2e02541d9a719bedc05c" name="perl-Sys-Guestfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="8156a68bdfb9977ef7d7afb4cc56a6f1b8e0a12393e8bc0715dc6509a19866b6" name="php" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="9dcf27554d409932744b256581ef0d9bd637db1747f381106235941b0b0d6883" name="php" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="16cf51c66e0baac1ef9a5e57a2e50565e4d8cc1d843a97220162c78b96b9a452" name="php-bcmath" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="cf35332fb07e30f21b52238da5552c6d511f35a9fe7d5817219145ae1943b79a" name="php-bcmath" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="47488c7e08410f17091eb98322bbe50e44829037bf549ebfc8622bbfd6db51bd" name="php-cli" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="c169092537ecd095ef033c5d4b1e00244f4fa2914b2f413027a699d6141e8559" name="php-cli" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="c3c7e5295156d983c36d03c7cfb9e4464b4d886accaf14efcaa874409269cea8" name="php-common" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="3996020c66e8a8efb2ab4336fa95a1d56040efd54f3309aa1fc743ea3e05524d" name="php-common" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="d0599ed57ab171427be984d335eb12ebac10b293c5a2234b3f4ae69e1b083431" name="php-dba" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="3fd62a883cb117e990d7595e07e65c8d43a6ef45d2bffd5db60a01023a3af13c" name="php-dba" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="6822cd6c1cf81312d678dc9d427913230917518f52e5316c0fbbbdf860d65278" name="php-devel" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="41beca04a04994035500248f874bcb06c7f7d565da8277c832a0e3c9516152a6" name="php-devel" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="36e9c24435cd542ba2d26b209558ed065bf743bc3caef71b54c6085150a2afd0" name="php-embedded" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="7bc0d4911cac7f2f8687e925627ada6f8cdf402488148081d3e4395dbfce773a" name="php-embedded" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="bcab48d080637694d882e5543c4ab8c787f45d04fb5e2f64b6318f08c589b85f" name="php-enchant" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="c73b44b0e4e169eda0951b331d694cab17d406b0c82284a86920de21004d9ab6" name="php-enchant" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="d671be26af2f176598a13342454d67038f94f50c29baaebd14ac3d65c7a05543" name="php-fpm" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="4b98501cca4958da4c1e1ccd8ed882c106416d602110b058b262a29e55b0fbc3" name="php-fpm" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="078e502207e606e40c9fc8ff8f2bea84aebed84dd0a77385e0f894a1428540b6" name="php-gd" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="6536865f549bfbf1a8f910af0aa1cb114c2b132d992287082f67fe8739d5417e" name="php-gd" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="5d568ff0ca50f9c69be70600f7851b6205e2f62acfdf6d97ec9455b4413d2952" name="php-intl" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="25ea068459ca28c4f33243e701fe696bfdbad64125f3d0328e5d6398fac3f0a6" name="php-intl" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="e17953eafb07903e809a7f9fcdcb75ce3758f74dcd3dddd5b06cec70311e4b90" name="php-ldap" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="9dcf1598580cc02ee404a496c3b5f6144364e6107beaeb3c843bd35fa48bd83e" name="php-ldap" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="5295021e75a12c8a76ccc680ed87c901b040ab6a77ea38cc571823cef877cb35" name="php-mbstring" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="b5ac46d3518941b436942fc8a13706ea4b5949c5f05012d150878d8850e73087" name="php-mbstring" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="14dde13f98c1b0c0c330036a6a4cab0bdcad8983a66bf3bc3070ecaa6c71e04e" name="php-mysql" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="4838503403dc68372a4b8c169b9c19bc102e1ba2b391d30adafd9156cb772c14" name="php-mysql" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="aa64655a7eb8090ab435e7f222a667ceaa08736fe007aad4fa440e74b22ba16e" name="php-mysqlnd" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="b957974ad7062074c8bd0848982f80db4e5a2dbea6f960dc8dc030f34292633e" name="php-mysqlnd" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="519f62992df09eb5807a472d7ebc692373c41b88c6861744192ae7d32a014586" name="php-odbc" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="4d9c4fb9fadad61aee9c8dab46ae3ab5f73ae7db96b835a6434db24c6440a417" name="php-odbc" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="7550497dcf4fdc7b4097ba38497e4f082ff7de08652ca2fb9f37415c942e5efd" name="php-pdo" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="4f430ad75798638aebc81dcb8cecd66162cc06f53418c7ad116d8406e0521e53" name="php-pdo" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="dc89e0548f67ceb8887e50b18a7fa44e98d43825599dd845ef140ec61b4ae4b5" name="php-pgsql" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="2ec8d35b9e52369f70aa2b0da44a0118267c2d2daeeac36678df76221556068e" name="php-pgsql" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="9be07994f1fd4a93cffd4efb3b3b097cebd111bd18373ac32b5c66478fefeeaa" name="php-process" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="fca1c28a358bb81a48967798179067f0752d88db509851d2518f7a684c959249" name="php-process" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="bf8ffd7fecc6217b971ca3135e674388738de7392cb6cf594767b13154000d64" name="php-pspell" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="5ed5c265a92589e8c58771eb69fef0988fa934ce53e646881fe3f7b3dc7e4772" name="php-pspell" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="cfc951b4d8efbb084de30b63a6d24262fa136d911b223ef320e61957252ca1e5" name="php-recode" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="87d4f1e17adacc444e0c6de228f5cf7666ac701f7c368ad580383189f6827278" name="php-recode" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="10754c2765d800810efa51f0e5ff0c89864736d0543a9abe4526d98d7dc3aa58" name="php-snmp" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="7fe6b6cabaf849f8eeb8ec570ec9f706a6b5f08e5ca34102dea01f0e2d40ac25" name="php-snmp" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="fe7597cb74faf9d0e9b3f32f9d7a5800d72187aa362a2cce10b82656d38e43b6" name="php-soap" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="5e10fef09ceff72b80763447e413f868ff47c460035270746367e7742d2c283a" name="php-soap" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="2265552c4231c70fc5f5f2b833a409e8a38fa4e23259da14a32e13a9ca445d27" name="php-xml" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="e528b6af44413f70a84f6b9e3b40d7e3b43a53aa9f6f44ffca1b012cb0b67982" name="php-xml" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="8f569341a81bfe99e724ec8ad1ca8e3b1de5fcfe94177ed11c62df5d6fa66f85" name="php-xmlrpc" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="3df5f78b13d46a2fa2b68c2f163e0dc4ae588a27b15b6b186560984357e6ce3a" name="php-xmlrpc" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="b980d5eab68942ac1946ddb004317bb6244c349e6b89dd4d416d27ab5addabc2" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="22fc73173e7285fbf6f2935104caf023d29ac22e7513706b2ae25330765bc828" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="f578bd6ae8733059ae100be9f238c2088e47234644a04204d403566155ad6e26" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="50c7c55cdd0a215e30d643962dacb37e9ed3dcf5cc2f984bf9c2fe5b0437135a" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="25f19dcd4e7ce7ae16287f372d032367b6dbd59f62ea676adc30b2cc9fea23ec" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="03f66e47be2cc844186bafb74e89561ca5fe26fb6e770066960cf272d857613c" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="15764af99b7a1c8f182c5b0912772fa452227c850c450e8637d9de42f6ce4f35" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="d4540c4818e087ac386419dce880a0a9bd6bb74b06c5b2693522115d3084d7a6" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="0b7e4388c76be019c8ea7db5ab27d97d3ea43352b8a802c8adb1247593559d7e" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="1fb6e10facec73865a0f7f378f097669838dd23f2f576ce7c2af41db5cfa4ebc" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="87c0d5f7c2b4d994b96d831f5f04d66355ab155aff2a99aa39a4c0d828c26dcc" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="50a0db3c4238f5360da325875b9e17370f0c36fdb92fbbcc27862efada9565c2" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="0d31b5d945c835f3ff06d056277ed38dd362a605c12fbf8d8a3992e4517e6574" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="bba6112eea2cdc0e6af6c891f19ff3e53862134aae901957fb50453298dbbfc5" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="43b15c1d32a8ae95d3c1f8989d9a65f66ec8b283ab34abd1454d78dd29b88415" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="bc99e62c8569c5799bd1a47aaec45b35460b9feca92e9b5eecc7f0377bcb3861" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="236103ec9084cfd1df973692f81c6d5140c8906e2ea702e8998edcb529d0c022" name="poppler" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="39fc8660c50bf03e732145b579a72b07ff0dad178c6b5853300c2df14555f554" name="poppler" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="b8084b689b6f14cab2b5a53943262be2377a85ea8361bb41490e43d322456788" name="poppler-cpp" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="9f6e000fef7fbf22071d79c356d83e103476793e93b13af60b4bf88d310d44f8" name="poppler-cpp" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="0bf7140ba4568c372a3d74c4af0eac86631fd8ade182fd6513c940a4ea63ea01" name="poppler-cpp-devel" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="19d4cce279e626f50bf3c3fdafbc21ee0fdd19d26ceb140a8f97e8f73b132dfe" name="poppler-cpp-devel" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="f97b473b70ce42809078c7243c3b18c15939cc9838770ad99cb01105e03db635" name="poppler-demos" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="58e527fc0e6b43393c9a859bdfc1236638a22037595d99b45a6772fb7bf8a33b" name="poppler-devel" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="187777839d2f15e6a81cca8d7b8632d9dc61a9ce9a6e3966b80bbb5001e700ae" name="poppler-devel" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="2f7f59cd7ca94cce959d9df6a6a860aa44d14f4e863a66b280eb395a61a5019e" name="poppler-glib" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="ef2c1ee602a26f7122a6fd77ee9468dbebc871288d5a03b2388813acc30dc2f9" name="poppler-glib" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="512f0c83c7331057fa55676a6b59d7db070b711eff42d2bd1fc12d93a719fdc4" name="poppler-glib-devel" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="13f3e9bc1683a3f6ccec8253d41c6cb44ec7b7653e72bf04a8ec9c4a7d787d5f" name="poppler-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="c6808beb226f2aad1b9c2a0247fceed81829e17ea2833c9d6b15c2bee8f87333" name="poppler-qt" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="5ae091f594d02ec71e5094d3dd946c3c52b0d48244df569892dc1b7cc041a4d4" name="poppler-qt" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="9ca071e7419a13b0436c1b707a98bedc9ff8147f99d983e7121a140a7243b9fd" name="poppler-qt-devel" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="7a1bfac8c8a5acbef64e0bd9f3542a6c85839be30a8de0b155def0c612ccfe6f" name="poppler-qt-devel" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="9ab68cd2ae7817e1831aaf1bac5f3f3990932f888cec55cc4d614a16b6965dde" name="poppler-utils" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="cf4473c46663cae2dbcde5dc160bc31023a0654b35a5c10e75b017df4b49632d" name="postgresql" arch="i686">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="3d19009dd3662cd2837394a6f9fabb21fea4b99ada73f931444051c03cc5e1f4" name="postgresql" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="28fdca25f34f07bf164ea56f6f072ec4e5e8493619310b05cc7e5bd69f26cb66" name="postgresql" arch="i686">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="6cf8c50ac492f6e2817792b89b377f485a0d3e5b13869e78ba6bbd047b099c67" name="postgresql" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="a994565953f3a335dfd6247c3a574e62314d81670a5cde6c9865913712c19c33" name="postgresql-contrib" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="5219a3d0fd0f20b06419bb4981da666ae4cf1b40c756215bcb21b013282cf3eb" name="postgresql-contrib" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="1068333ffc489032bdf890cbb1b54b6c0f5e68bbf055dc12bff202ad919cd848" name="postgresql-devel" arch="i686">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="1a20824ba8e41d6557848ce3a581a6c35964d696e2189964728e5c2987432088" name="postgresql-devel" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="12e3a96dfe6f27109753042c2f1110708e18d5ecb752378f5ba8721aa5151942" name="postgresql-devel" arch="i686">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="6a365662326f25389fd176f74c9dbfac1409a2f89e579a8c15740a875e295fd0" name="postgresql-devel" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="04a71700fdc091854af6fcf0b384680593960edb2c518aa3ab950bb626da83a6" name="postgresql-docs" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="ba1e5baeda5a9eb5d9edd7ede43bf3ce2d25dfcd0abfdf2c4df30527cc8b36fc" name="postgresql-docs" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="e40812ea11944dc64400047da4eed8c5978ca655aa079b60e85c0509e929449b" name="postgresql-libs" arch="i686">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="fd6c15a28dce9ff5886b36540dfc8cd3478454eacc0e8a371c088a686a88e3eb" name="postgresql-libs" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="d801b41c3ca382b634a53ddb8e082831fdefd3fe6fc6156521aa6529f0e592ac" name="postgresql-libs" arch="i686">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="9a020b21d7023f30172e3babb68f2c57cfdae2507629b24550aa3dc5359a78b5" name="postgresql-libs" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="12a89523f7ce9011ed2fc8113fac2326e68b4ae39fd868340d68386c947bdbb2" name="postgresql-plperl" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="c11ca55d85212f5201e2a0029e8b0d689da771e2211269d8d5f43d4ff9e49f46" name="postgresql-plperl" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="bbef6a84f365ed2a5c79c1eac03c26efb5a7026fd79ab0b0b7a7367f9d25023b" name="postgresql-plpython" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="2f0212012f9e1ef8f1d785cce60b31ed95eacecf30821d71f081d630aae38ce0" name="postgresql-plpython" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="79339bf2892e9cce0a2d4fb4fd44a5bddeacd54ef246bf410fd6ca12639c7753" name="postgresql-pltcl" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="8e856bcd2d42ec9b9ab6c84ea75fe2051edc558a40678c4aea95023aafd075fe" name="postgresql-pltcl" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="ade28e4ae5d1b238101d23b5959114a9e760137ebe9ea5548e6ed99044a4d206" name="postgresql-server" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="70da1578fae5830834726cd6a0cf87b908524ba299fb8fcbfbf262eaf46d6ed5" name="postgresql-server" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="a8af6e7e9510255255b9a15bf80e0b9c15b1f7edb325b6e4867a6155fc8237a9" name="postgresql-static" arch="i686">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="8ce53bff9caed075150909239d7494116b0e759b785e21df73d6b2e716f299df" name="postgresql-static" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="fd20b1612b5ef81d58cc653b3906eab4e09bbab6c63cd5c60fa8d9f8ff917f88" name="postgresql-static" arch="i686">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="f4bee6e13a38102a14eb41714772eb5ae793b4e188d30752a7a356172a10c59a" name="postgresql-static" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="07d042ed4cbbdc4a3aabcac3b1353a2bb8c1a65b2304ee17716992d1aa371d0f" name="postgresql-test" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="9425fb4b6607c4b2d05eb3f95938d0345526ec8bfec646f2af6bfdd854563f2f" name="postgresql-test" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="c7bd45eadef442c7be95042084d59291900da5599e2e7185e93997145b8cf189" name="postgresql-upgrade" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="596cb05015f5015b019b29a7fe6cf466feac0bd0bea9ed47e1963975021e6ac1" name="postgresql-upgrade" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="e9d5d14b043dfa5288843084b2cd1486cbc1c79b3f82efb440e4cdb6c665c06c" name="procmail" arch="x86_64">
  <version epoch="0" ver="3.22" rel="36.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.22-28" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-29" date="1326715200">- Rebuilt without NO_NFS_ATIME_HACK
  Resolves: rhbz#666383</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.22-30" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-31" date="1346760000">- Hardened build with PIE and full RELRO
  Resolves: rhbz#853186</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-32" date="1359979200">- Updated sources URLs</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.22-33" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.22-34" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-35" date="1409832000">- Fixed buffer overflow in formail
  Resolves: CVE-2014-3618</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-36" date="1490184000">- Fixed several out of bounds RWs
  Resolves: rhbz#1138526</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-36.1" date="1511265600">- Fixed possible buffer overflow in loadbuf function
  Resolves: CVE-2017-16844</changelog>
</package>
<package pkgid="823ec40b11fbcd878654b50149763ba9dcef8c4422a23f6fffd440dc90db326e" name="pygobject3-devel" arch="x86_64">
  <version epoch="0" ver="3.22.0" rel="1.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.13.4-2" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-1" date="1408449600">- Update to 3.13.90</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-2" date="1408622400">- Backport a fix for virt-manager crash (#1130758)</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.91-1" date="1409659200">- Update to 3.13.91</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.92-1" date="1410868800">- Update to 3.13.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.14.0-1" date="1411387200">- Update to 3.14.0</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.14.0-2" date="1432296000">- Add patch to fix a coverity issue
  https://bugzilla.gnome.org/show_bug.cgi?id=749698</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 3.14.0-3" date="1442318400">- Allow importing static modules to fix RHEL7 rebase regressions</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0
- Resolves: #1387039</changelog>
  <changelog author="John Francini - 3.22.0-1.1" date="1510228800">- Bump release to allow rebuild to fix BZ#1510160</changelog>
</package>
<package pkgid="af0b0074c29e86c59a4018cbe8e3e0fa60c35839b9415f0ce5d70501786c4464" name="python-backports-lzma" arch="x86_64">
  <version epoch="0" ver="0.0.2" rel="9.el7"/>
  <changelog author="Ian Weller &lt;iweller@redhat.com&gt; - 0.0.2-1" date="1376913600">- Initial package build</changelog>
  <changelog author="Ian Weller &lt;iweller@redhat.com&gt; - 0.0.2-2" date="1377000000">- BR: python-backports</changelog>
  <changelog author="Ian Weller &lt;iweller@redhat.com&gt; - 0.0.2-3" date="1377000001">- Actually fix check section</changelog>
  <changelog author="Ian Weller &lt;iweller@redhat.com&gt; - 0.0.2-4" date="1377000002">- Fix perms on _lzma.so
- Add LICENSE from upstream</changelog>
  <changelog author="Ian Weller &lt;iweller@redhat.com&gt; - 0.0.2-5" date="1379419200">- Fix perms on _lzma.so, again</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.0.2-6" date="1398340800">- Rebuilt for RHEL-7</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.0.2-7" date="1399464000">- do not delete __init__.py* because no python-backports package for RHEL-7</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.0.2-8" date="1418731200">- Resolves: rhbz#1158538 - delete __init__.py*, now provided by python-backports</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 0.0.2-9" date="1492516800">- Bump and build for all architectures</changelog>
</package>
<package pkgid="f1955a0c95bbc404cc38efda8b8f84f1c10ae5d51b806314ce365abee8a8925a" name="python-dmidecode" arch="x86_64">
  <version epoch="0" ver="3.12.2" rel="1.1.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; 3.10.14-5" date="1342699200">- Upstream relocated. Document source tag and tarball generation.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-6" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-8" date="1371470400">- Attribute dmispec may cause invalid XML on some hardware.
- Signal handler for SIGILL.</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-9" date="1371729600">- Attribute installed may appear as duplicate and cause invalid XML.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1" date="1489406400">- Update to new release
- Resolves: #1431548</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1.1" date="1511179200">- Revert interface changes
- Resolves: #1514017</changelog>
</package>
<package pkgid="c5e3774107235bebdbfcbba2ce3e9b123a520fa8321d80d9243194e9792df71b" name="python-docker-py" arch="noarch">
  <version epoch="0" ver="1.10.6" rel="3.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.2.3-1" date="1434715200">- Rebase to 1.2.3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.4.0-116" date="1443009600">- built @rhatdan/master commit#54a154d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.4.0-117" date="1443009601">- obsoletes docker-python</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.4.0-118" date="1446638400">- Resolves: rhbz#1254579 - previous docker-python was archful</changelog>
  <changelog author="Tomas Tomecek &lt;ttomecek@redhat.com&gt; - 1.6.0-1" date="1452686400">- update to 1.6.0</changelog>
  <changelog author="Tomas Tomecek &lt;ttomecek@redhat.com&gt; - 1.7.2-1" date="1457092800">- new upstream release: 1.7.2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.9.0-1" date="1473249600">- Resolves: #1374058 - rebase to upstream 1.9.0</changelog>
  <changelog author="Tomas Tomecek &lt;ttomecek@redhat.com&gt; - 1.10.6-1" date="1482235200">- update to 1.10.6</changelog>
  <changelog author="Tomas Tomecek &lt;ttomecek@redhat.com&gt; - 1.10.6-2" date="1504526400">- backport cpu_rt_* options, rhbz#1486189</changelog>
  <changelog author="Tomas Tomecek &lt;ttomecek@redhat.com&gt; - 1.10.6-3" date="1504699200">- fix the backport of cpu_rt_* options</changelog>
</package>
<package pkgid="403389c7b317f0cd8fb82f6889a91fd9cb16d5da3864764edb55af314f8a2b28" name="python-docker-pycreds" arch="noarch">
  <version epoch="0" ver="1.10.6" rel="3.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.2.3-1" date="1434715200">- Rebase to 1.2.3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.4.0-116" date="1443009600">- built @rhatdan/master commit#54a154d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.4.0-117" date="1443009601">- obsoletes docker-python</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.4.0-118" date="1446638400">- Resolves: rhbz#1254579 - previous docker-python was archful</changelog>
  <changelog author="Tomas Tomecek &lt;ttomecek@redhat.com&gt; - 1.6.0-1" date="1452686400">- update to 1.6.0</changelog>
  <changelog author="Tomas Tomecek &lt;ttomecek@redhat.com&gt; - 1.7.2-1" date="1457092800">- new upstream release: 1.7.2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.9.0-1" date="1473249600">- Resolves: #1374058 - rebase to upstream 1.9.0</changelog>
  <changelog author="Tomas Tomecek &lt;ttomecek@redhat.com&gt; - 1.10.6-1" date="1482235200">- update to 1.10.6</changelog>
  <changelog author="Tomas Tomecek &lt;ttomecek@redhat.com&gt; - 1.10.6-2" date="1504526400">- backport cpu_rt_* options, rhbz#1486189</changelog>
  <changelog author="Tomas Tomecek &lt;ttomecek@redhat.com&gt; - 1.10.6-3" date="1504699200">- fix the backport of cpu_rt_* options</changelog>
</package>
<package pkgid="7ac43e506684cd922a0b6604b61da4938504e236ed116d4336bd6ea8236baa39" name="python-gevent" arch="x86_64">
  <version epoch="0" ver="1.0" rel="3.el7"/>
  <changelog author="Silas Sewell &lt;silas@sewell.ch&gt; - 0.13.3-1" date="1297857600">- Update to 0.13.3</changelog>
  <changelog author="Silas Sewell &lt;silas@sewell.org&gt; - 0.13.6-1" date="1311508800">- Update to 0.13.6</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.6-2" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.6-3" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Silas Sewell &lt;silas@sewell.org&gt; - 0.13.8-1" date="1356609600">- Update to 0.13.8</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.8-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.8-3" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@cora.nwra.com&gt; - 1.0-1" date="1390392000">- Update to 1.0</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0-2" date="1397736000">- Rebuilt for RHEL-7</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 1.0-3" date="1492516800">- Bump and rebuild for all architectures</changelog>
</package>
<package pkgid="9ae2e806b852101c26d87e3f06cc8c5b83ae2be759f65eb09f5d8439b360891c" name="python-gobject" arch="x86_64">
  <version epoch="0" ver="3.22.0" rel="1.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.13.4-2" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-1" date="1408449600">- Update to 3.13.90</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-2" date="1408622400">- Backport a fix for virt-manager crash (#1130758)</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.91-1" date="1409659200">- Update to 3.13.91</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.92-1" date="1410868800">- Update to 3.13.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.14.0-1" date="1411387200">- Update to 3.14.0</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.14.0-2" date="1432296000">- Add patch to fix a coverity issue
  https://bugzilla.gnome.org/show_bug.cgi?id=749698</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 3.14.0-3" date="1442318400">- Allow importing static modules to fix RHEL7 rebase regressions</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0
- Resolves: #1387039</changelog>
  <changelog author="John Francini - 3.22.0-1.1" date="1510228800">- Bump release to allow rebuild to fix BZ#1510160</changelog>
</package>
<package pkgid="edc35779b37ca0a3ea76e71aeeb2cef44677cf5ab125bb7b0ae99574f8d865f6" name="python-gobject-base" arch="x86_64">
  <version epoch="0" ver="3.22.0" rel="1.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.13.4-2" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-1" date="1408449600">- Update to 3.13.90</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-2" date="1408622400">- Backport a fix for virt-manager crash (#1130758)</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.91-1" date="1409659200">- Update to 3.13.91</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.92-1" date="1410868800">- Update to 3.13.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.14.0-1" date="1411387200">- Update to 3.14.0</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.14.0-2" date="1432296000">- Add patch to fix a coverity issue
  https://bugzilla.gnome.org/show_bug.cgi?id=749698</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 3.14.0-3" date="1442318400">- Allow importing static modules to fix RHEL7 rebase regressions</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0
- Resolves: #1387039</changelog>
  <changelog author="John Francini - 3.22.0-1.1" date="1510228800">- Bump release to allow rebuild to fix BZ#1510160</changelog>
</package>
<package pkgid="37a0a572dbd57a819424e7390a0bcfac8603c86c2d7961f2432c9dab5c6fa6bf" name="python-greenlet" arch="x86_64">
  <version epoch="0" ver="0.4.2" rel="4.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.1-10" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="P&#xE1;draig Brady &lt;P@draigBrady.com&gt; - 0.3.1-11" date="1349956800">- Add support for ppc64</changelog>
  <changelog author="P&#xE1;draig Brady &lt;P@draigBrady.com&gt; - 0.4.0-1" date="1358510400">- Update to 0.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.0-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.0-3" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; 0.4.1-1" date="1375704000">- Update to 0.4.1
- Fix FTBFS bug #993134</changelog>
  <changelog author="Orion Poplawski &lt;orion@cora.nwra.com&gt; 0.4.2-1" date="1390478400">- Update to 0.4.2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; 0.4.2-2" date="1397476800">- include gcc-c++ BR
- Rebuilt for RHEL-7</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; 0.4.2-3" date="1397476801">- gcc-c++ present in default buildroot, not required in BR</changelog>
  <changelog author="d.marlin &lt;dmarlin@redhat.com&gt;" date="1488888000">- Add support for ppc64 in LE mode running ABIv2
  Signed-off-by: Ulrich Weigand &lt;uweigand@de.ibm.com&gt;
  Signed-off-by: Tony Breeds &lt;tony@bakeyournoodle.com&gt;
  rhbz#1252900
- Remove s390x from skip check list.
- Bump release and build of all archs.</changelog>
</package>
<package pkgid="1900187f421cba5bbbff75a527de1ffeb533c592669da51a5f8e0d0932a12fcb" name="python-greenlet-devel" arch="x86_64">
  <version epoch="0" ver="0.4.2" rel="4.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.1-10" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="P&#xE1;draig Brady &lt;P@draigBrady.com&gt; - 0.3.1-11" date="1349956800">- Add support for ppc64</changelog>
  <changelog author="P&#xE1;draig Brady &lt;P@draigBrady.com&gt; - 0.4.0-1" date="1358510400">- Update to 0.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.0-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.0-3" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; 0.4.1-1" date="1375704000">- Update to 0.4.1
- Fix FTBFS bug #993134</changelog>
  <changelog author="Orion Poplawski &lt;orion@cora.nwra.com&gt; 0.4.2-1" date="1390478400">- Update to 0.4.2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; 0.4.2-2" date="1397476800">- include gcc-c++ BR
- Rebuilt for RHEL-7</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; 0.4.2-3" date="1397476801">- gcc-c++ present in default buildroot, not required in BR</changelog>
  <changelog author="d.marlin &lt;dmarlin@redhat.com&gt;" date="1488888000">- Add support for ppc64 in LE mode running ABIv2
  Signed-off-by: Ulrich Weigand &lt;uweigand@de.ibm.com&gt;
  Signed-off-by: Tony Breeds &lt;tony@bakeyournoodle.com&gt;
  rhbz#1252900
- Remove s390x from skip check list.
- Bump release and build of all archs.</changelog>
</package>
<package pkgid="60628c0d476df866ccfc53fb4ae2dbb14c03d0b4a9aa06a5d7d62436935dcc21" name="python-httplib2" arch="noarch">
  <version epoch="0" ver="0.9.2" rel="1.el7"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.9-2" date="1401278400">- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9-3" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Toshio Kuratomi &lt;toshio@fedoraproject.org&gt; - 0.9-4" date="1404129600">- Replace python-setuptools-devel BR with python-setuptools</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 0.9-5" date="1421064000">- certfile.patch: use /etc/pki/tls not /etc/ssl/certs, patch python3 too</changelog>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; 0.9-6" date="1428062400">- Add patch to fix http over proxy. Fixes bug #857514
- Add patch to fix CVE-2013-2037. Fixes bug #958640
- Add patch to fix binary headers in python3. Fixes bug #1205127</changelog>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; 0.9.1-1" date="1428840000">- Update to 0.9.1 and drop upstreamed patches</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.1-2" date="1434628800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Jon Schlueter &lt;jschluet@redhat.com&gt; 0.9.1-2.1" date="1445601600">- change guard for rhel 7 to exclude python 3</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; 0.9.1-3" date="1494936000">- Rebuild for RHEL 7.4 Extras</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; 0.9.2-1" date="1494936001">- Update to 0.9.2. bz1481430 and https://github.com/jcgregorio/httplib2/pull/313</changelog>
</package>
<package pkgid="0c5412fe14dcd799d7de1e13a04208049e6225654ee5e0ba3b1dbeb8c48de903" name="python-jsonpatch" arch="noarch">
  <version epoch="0" ver="1.2" rel="4.el7"/>
  <changelog author="Alan Pevec &lt;apevec@gmail.com&gt; - 1.1-1" date="1372680000">- Initial package.</changelog>
  <changelog author="Alan Pevec &lt;apevec@gmail.com&gt; - 1.1-2" date="1379073600">- review feedback: move %check section, add missing build requirements</changelog>
  <changelog author="Alan Pevec &lt;apevec@gmail.com&gt; - 1.2-1" date="1381492800">- Update to 1.2</changelog>
  <changelog author="Alan Pevec &lt;apevec@gmail.com&gt; - 1.2-2" date="1381838400">- add runtime dep on jsonpointer</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@gmail.com&gt; - 1.2-3" date="1492084800">- Import to RHEL 7
Resolves: rhbz#1434888</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@gmail.com&gt; - 1.2-4" date="1492084801">- Bump release for rebuild
Resolves: rhbz#1434888</changelog>
</package>
<package pkgid="8e79811132a8aa3baa7ede3e68d787ef418f83bf708da41f55a598179b70524b" name="python-libguestfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="477238aab2e8fb5cbb7a48c13b3b994e565cbedc89edc19361764df2f081f01f" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="926553e1bd01c2dec6eacf1fed13c460bd13ead6f9d9e23faf869a14a9c7dbed" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="868157aa8d80e39ba22900e2ecff989abd4aebcd0014b2000b0f324337f5f41b" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="12e9c3e35abf972dff42bb8f2eaef5c38841badce477002c6a9b5bd5cdf50d2c" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="c2719f2407e7b9a35d5102a72781405605a0e5f158b7ee9fad41088e027ab6cd" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="51564655c3d5a0ecee14010ba322bdbdf7f60dc16b4b9c1fd5bda1000bd61589" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="585565a07dafc706996cdae2b2ca5639f7c94f91ec5cd96282d9036508f96f24" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="c2f6461570eb17bbf300afbd96b2f86439782eeffce4cbd3f344281bdd3464e6" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="457d704fa18d8b6268cd3fe93b333875e8a8f82a1e9fd20b8df7160056e383da" name="python-libteam" arch="x86_64">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="a10ab2cc02569c41bf025ef583e5d4e16819322ca34054fc89b0817dff879a0b" name="python-paramiko" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="4.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.15.2-3" date="1434628800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.15.2-4" date="1447156800">- Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.2-5" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 1.16.0-1" date="1459080000">- Update to 1.16.0
- Adopt to new packaging guidelines</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenko@redhat.com&gt; - 2.0.0-1" date="1461931200">- Update to 2.0.0 (RHBZ #1331737)</changelog>
  <changelog author="Jon Schlueter &lt;jschluet@redhat.com&gt; 2.0.0-1.0" date="1467979200">- Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; 2.1.1-1" date="1483617600">- Update to 2.1.1</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.1.1-2" date="1494590400">- Rebuild for RHEL 7.4 Extras</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.1.1-3" date="1521633600">- Fix a security flaw (CVE-2018-7750) in Paramiko's server
  mode (emphasis on **server** mode; this does **not** impact *client* use!)
  Backported from 2.1.5.
  Resolves #1557142</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.1.1-4" date="1521720000">- Add a dependency on python2-pyasn1. It used to be a dependency
  of python2-cryptography, but it is not the case with newer versions.
  (RHBZ #1559133)</changelog>
</package>
<package pkgid="ac185c0bdcc12f63ee355268816e8732c8f69dd16aa905f3fb2738ae097b47b9" name="python-paramiko-doc" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="4.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.15.2-3" date="1434628800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.15.2-4" date="1447156800">- Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.2-5" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 1.16.0-1" date="1459080000">- Update to 1.16.0
- Adopt to new packaging guidelines</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenko@redhat.com&gt; - 2.0.0-1" date="1461931200">- Update to 2.0.0 (RHBZ #1331737)</changelog>
  <changelog author="Jon Schlueter &lt;jschluet@redhat.com&gt; 2.0.0-1.0" date="1467979200">- Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; 2.1.1-1" date="1483617600">- Update to 2.1.1</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.1.1-2" date="1494590400">- Rebuild for RHEL 7.4 Extras</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.1.1-3" date="1521633600">- Fix a security flaw (CVE-2018-7750) in Paramiko's server
  mode (emphasis on **server** mode; this does **not** impact *client* use!)
  Backported from 2.1.5.
  Resolves #1557142</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.1.1-4" date="1521720000">- Add a dependency on python2-pyasn1. It used to be a dependency
  of python2-cryptography, but it is not the case with newer versions.
  (RHBZ #1559133)</changelog>
</package>
<package pkgid="bf0a4bc1731716d4f9fc5ea83f1125bb1d86d14980ee85ce4611e2a72188f770" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-685.el7]" date="1497873600">- [mm] enlarge stack guard gap (Larry Woodman) [1452733] {CVE-2017-1000364}
- [mm] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1462267]
- [fs] nfs: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask (Benjamin Coddington) [1449466]
- [hid] hid_wacom: temporaly disable power_supply usage from driver (Aristeu Rozanski) [1458348]
- [drm] mgag200: Fix to always set HiPri for G200e4 V2 (Rob Clark) [1461985]
- [nvme] submit nvme_admin_activate_fw to admin queue (David Milburn) [1456978]
- [netdrv] i40e: set VFs to untrusted mode by default (Stefan Assmann) [1462105]
- [netdrv] tun: use symmetric hash (Jason Wang) [1458645]
- [crypto] qat: copy back iv on completion (Neil Horman) [1446394]
- [crypto] chcr - Fix txq ids (Sai Vemuri) [1457392]
- [crypto] chcr - fix itnull.cocci warnings (Sai Vemuri) [1426189]
- [crypto] chcr - Change flow IDs (Sai Vemuri) [1426189]
- [crypto] chcr - Check device is allocated before use (Sai Vemuri) [1426189]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
</package>
<package pkgid="34060fdf37374e0b370170a0bfca5dcebadbdf473fcf2ac4972f8ac17ce13249" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
</package>
<package pkgid="c86448a3f2ae8b78f6714994774c0130f8506334406b9c0427724ff29eec7c33" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
</package>
<package pkgid="76219f05e4c39cf65eb5458a28e656ffb9c1b47bf2bfc92130ac31041484f9db" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
</package>
<package pkgid="b74782cb43f925fd85d511b2878ccc5e4c6875134c930f0bd2e9d0adbe05faa7" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
</package>
<package pkgid="416e0eae8443fa5d976a88b41aa00ddfd10cd72ca1377297e0d9efbea5ce7165" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="ef28fdfc7dab760d1e0abc269bd0b7e618c8c2454895fafbd4befd0afde0bd58" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
</package>
<package pkgid="3c07a320aa552168e1809a8f4300ff0cdc2e3c79c12c7ca6671cffe61d0e095f" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
</package>
<package pkgid="3c11a640370d5ed14d8459e13eff9e62815eb2153eb7ab9f20ea8b226787c3dd" name="python-prettytable" arch="noarch">
  <version epoch="0" ver="0.7.2" rel="3.el7"/>
  <changelog author="Chris Lalancette &lt;clalance@redhat.com&gt; - 0.5-1" date="1309348800">- Initial package.</changelog>
  <changelog author="Chris Lalancette &lt;clalance@redhat.com&gt; - 0.5-2" date="1309867200">- BuildRequire python-setuptools</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.5-3" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.5-4" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="P&#xE1;draig Brady &lt;P@draigBrady.com&gt; - 0.6-1" date="1344340800">- Update to 0.6</changelog>
  <changelog author="Ralph Bean &lt;rbean@redhat.com&gt; - 0.6.1-1" date="1344340801">- New upstream version
- Added support for python3
- Included README, COPYING, and CHANGELOG in docs</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.1-3" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="P&#xE1;draig Brady &lt;pbrady@redhat.com&gt; - 0.7.2-1" date="1389096000">- Latest upstream</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 0.7.2-3" date="1492084800">- Import to RHEL 7
- Bump release for rebuild
Resolves: rhbz#1434891</changelog>
</package>
<package pkgid="adec87a288b2f22e3ae4e4af602c0ab07df47e501e2a66185c98435773150d2b" name="python-rhsm" arch="x86_64">
  <version epoch="0" ver="1.19.10" rel="1.el7_4"/>
  <changelog author="Alex Wood &lt;awood@redhat.com&gt; 1.19.1-1" date="1485345600">- Adjust our C bindings for OpenSSL v1.1 API. (awood@redhat.com)
- Make python-rhsm Python-3 compatible (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.2-1" date="1489406400">- 1423443: Handle IndexError during m2crypto request (khowell@redhat.com)
- Move python-rhsm into subdirectory (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.3-1" date="1490961600">- 1435475: Support older versions of M2Crypto (awood@redhat.com)
- 1427069: Prioritize content from Basic entitlements (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.4-1" date="1491825600">- 1438552: Allows releases to be listed through a proxy (csnyder@redhat.com)
- 1420533: Add no_proxy option to API, config, UI (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.5-1" date="1492430400">- 1432990: Better message for bad CA cert (wpoteat@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.6-1" date="1493726400">- 1426343: fixed rct to display cert without subjectAltName.
  (jhnidek@redhat.com)
- Add Update subscriptions pools (tcoufal@redhat.com)
- Add support to list future subscription pools (tcoufal@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.7-1" date="1495627200">- 1443159: Added default value for splay configuration (jhnidek@redhat.com)
- 1451166: Fix Host header when using proxy (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.8-1" date="1496145600">- 1443164: no_proxy match the host name when *.redhat.com is used
  (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.9-1" date="1496836800">- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.10-1" date="1504267200">- 1481384: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="48f9793deacebd4dc6f179851e61f1d21b30aa7eb64470bf34daff88e998f591" name="python-rhsm-certificates" arch="x86_64">
  <version epoch="0" ver="1.19.10" rel="1.el7_4"/>
  <changelog author="Alex Wood &lt;awood@redhat.com&gt; 1.19.1-1" date="1485345600">- Adjust our C bindings for OpenSSL v1.1 API. (awood@redhat.com)
- Make python-rhsm Python-3 compatible (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.2-1" date="1489406400">- 1423443: Handle IndexError during m2crypto request (khowell@redhat.com)
- Move python-rhsm into subdirectory (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.3-1" date="1490961600">- 1435475: Support older versions of M2Crypto (awood@redhat.com)
- 1427069: Prioritize content from Basic entitlements (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.4-1" date="1491825600">- 1438552: Allows releases to be listed through a proxy (csnyder@redhat.com)
- 1420533: Add no_proxy option to API, config, UI (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.5-1" date="1492430400">- 1432990: Better message for bad CA cert (wpoteat@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.6-1" date="1493726400">- 1426343: fixed rct to display cert without subjectAltName.
  (jhnidek@redhat.com)
- Add Update subscriptions pools (tcoufal@redhat.com)
- Add support to list future subscription pools (tcoufal@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.7-1" date="1495627200">- 1443159: Added default value for splay configuration (jhnidek@redhat.com)
- 1451166: Fix Host header when using proxy (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.8-1" date="1496145600">- 1443164: no_proxy match the host name when *.redhat.com is used
  (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.9-1" date="1496836800">- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.10-1" date="1504267200">- 1481384: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="d6f034fa2f03157601169aac4ff9eda9bc647a864d8614040ac8242f3701a655" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="4188eed2706fb2a37a443e2ff853c201a38774467cb9ac76f93a608d6702e4ab" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="56d9eb80e0d3eeda24e70e579022deae0c0131da2fe17e46fc3b2280b5adbf1f" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="2da3e0df0a8936023803a915c6c336727226e8fc6f98ff8b32d3a7c731a27559" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="756d7f731e2e4c64befbe265f573cb2ccc866a29169906d006f5dc3f35b91408" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="949a518987c65f7bf4ebfcd4034df5799ac09bc6649da27dd330505bebe65b30" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="dadb17a6beab8b8976c576f541c53497993ea47606e6576c8ee935f065c34d83" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="26b1b8fe7410b67fae4c8f7760d844e267a46444453783a44992567ee5729507" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="8204fc1cfbc3c5604e344631675f9ffc01ce4cdec9be79e4ca1ab66adda4de94" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="e7cb29ce51a5b6f648e60904969e6ad854cb2139ed21e50f1f2037bcf23f1869" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="3ed07fd24cced2d062fe5438c601000cffc3f2ccb8f703e716c50329ce9cc984" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="f926e3341fc07aca152aac827c9417c1ac97c95ec43fcd9ef2ac2d6abca076b9" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="d997797bab34fcf9603b9a340844c1438c37e69366ee7bf335fd4c05f3865238" name="python-tevent" arch="x86_64">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="366665980d3cc8d75de8dec94fb006f08eb8c8b39e4e4a9b6eaa053fb205ffb3" name="python2-cryptography" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="1.el7_4.1"/>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.0.2-2" date="1446638400">- Rebuilt for Python3.5 rebuild</changelog>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.1-1" date="1447243200">- Update to v1.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.2.1-1" date="1452340800">- Update to v1.2.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.2.1-2" date="1452513600">- Move python-cryptograph =&gt; python2-cryptography</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-3" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-1" date="1462276800">- Update to v1.3.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-2" date="1462881600">- Make it easier to build on EL7</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-3" date="1462881601">- Remove versioned setuptools dependency</changelog>
  <changelog author="Christian Heimes &lt;cheimes@redhat.com&gt; - 1.7.2-1" date="1487073600">- Update to 1.7.2
- Disable pytest.deprecated_call() tests
- Remove versioned pytest
- Add build requirements pytz</changelog>
  <changelog author="Christian Heimes &lt;cheimes@redhat.com&gt; - 1.7.2-1.1" date="1502712000">- Ignore errors on OpenSSL's error stack when initializing, fixes RHBZ#1485896
- Fix parsing of long OIDs, fixes RHBZ#1485898</changelog>
</package>
<package pkgid="d4868ebcae3bc10e2f55398d121011317059fa25de3e3e6d314da931127607c7" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
</package>
<package pkgid="999c92bc071dfa692a7c86d17eae0df4c50940ad878b110b72a3217df69b93a9" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
</package>
<package pkgid="5a28ca42d4fe5b55b8a4966fbec8cff20756560e4e6c9e8e43fd8ae40ef17fcc" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7_4"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
</package>
<package pkgid="8ec0d06f69f3b7645e34585fa466cf59010f94c95fc5dfe107951a5e92a42328" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
</package>
<package pkgid="835e1511b65c078dc9b73b3bb1b8405c5a02fb4e509ce43532a9c0aab04b1660" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
</package>
<package pkgid="2a255be3c8d19205457a17b9621365e5a0e81c6fbdd1ddcbf420a9b50afe6a5e" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7_4"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
</package>
<package pkgid="e63412ec34e008af0a2551aec8f45cd9e3d21266e60c85db3f2c0e9819ee17f1" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
</package>
<package pkgid="d6fffc2b08f04cdc58b84dc2da1f8a057a7c19983048234d4f4bfdc60d31b420" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
</package>
<package pkgid="ffb1120d8f57177865c9c073ec03dc49066fe4fabee5975f3207c300735b549c" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7_4"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
</package>
<package pkgid="fd45296b8e391ceb36f672596feb1d605c9cba277ee2b12bf5fb27dd8e82a756" name="python2-jmespath" arch="noarch">
  <version epoch="0" ver="0.9.0" rel="3.el7"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 0.4.1-1" date="1406289600">- Initial packaging</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 0.4.1-2" date="1406289601">- Add Python 3 support</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 0.5.0-1" date="1418990400">- New version</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.5.0-2" date="1434628800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.5.0-3" date="1447156800">- Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fabio@locati.cc&gt; - 0.9.0-1" date="1451390400">- Upgrade to upstream current version
- Improve the spec file
- Make possible to build in EL6</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.9.0-3" date="1505131200">- Rebuilt for RHEL 7 Extras</changelog>
</package>
<package pkgid="c266006d5db5cffd0b5be97ba1ce1489b6c3690bdfde32da14d84619b98d94c2" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-133.el7" date="1489060800">- kvm-target-i386-add-Ivy-Bridge-CPU-model.patch [bz#1368375]
- kvm-x86-add-AVX512_4VNNIW-and-AVX512_4FMAPS-features.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Kill-unused-code.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-level.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-CPU-v.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-xleve.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Set-all-feature-words-.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Fill-feature-words-in-.patch [bz#1382122]
- kvm-target-i386-kvm_check_features_against_host-Kill-fea.patch [bz#1382122]
- kvm-target-i386-Make-TCG-feature-filtering-more-readable.patch [bz#1382122]
- kvm-target-i386-Filter-FEAT_7_0_EBX-TCG-features-too.patch [bz#1382122]
- kvm-target-i386-Filter-KVM-and-0xC0000001-features-on-TC.patch [bz#1382122]
- kvm-target-i386-Define-TCG_-_FEATURES-earlier-in-cpu.c.patch [bz#1382122]
- kvm-target-i386-Loop-based-copying-and-setting-unsetting.patch [bz#1382122]
- kvm-target-i386-Loop-based-feature-word-filtering-in-TCG.patch [bz#1382122]
- kvm-spice-remove-spice-experimental.h-include.patch [bz#1430606]
- kvm-spice-replace-use-of-deprecated-API.patch [bz#1430606]
- Resolves: bz#1368375
  ([Intel 7.4 Bug] qemu-kvm does not support “-cpu IvyBridge”)
- Resolves: bz#1382122
  ([Intel 7.4 FEAT] KVM Enable the avx512_4vnniw, avx512_4fmaps instructions in qemu)
- Resolves: bz#1430606
  (Can't build qemu-kvm with newer spice packages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
</package>
<package pkgid="dba6011710ea4e659a1ecfb5cf53b6f0a7d07c4fd8ea4bcf55ed594c95d17747" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
</package>
<package pkgid="45abe03b12295dc0d789744714ea929a7417d73de785958a094b327088283da6" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
</package>
<package pkgid="8f9ab953dd71d080f872ba3e6f9623bf5e3301e598c17fc0bbe79fe1c66554f4" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
</package>
<package pkgid="a94d0cdfd82ac341546a5b3844d531f8fd600ce0cd087915262eac1491f5968e" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.6" date="1513252800">- Fix CVE-2017-5715</changelog>
</package>
<package pkgid="12580b2f90704bfb250c4ec62dc1e4dafd91a24dec27889449378dfb2042eb7e" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-133.el7" date="1489060800">- kvm-target-i386-add-Ivy-Bridge-CPU-model.patch [bz#1368375]
- kvm-x86-add-AVX512_4VNNIW-and-AVX512_4FMAPS-features.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Kill-unused-code.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-level.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-CPU-v.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-xleve.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Set-all-feature-words-.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Fill-feature-words-in-.patch [bz#1382122]
- kvm-target-i386-kvm_check_features_against_host-Kill-fea.patch [bz#1382122]
- kvm-target-i386-Make-TCG-feature-filtering-more-readable.patch [bz#1382122]
- kvm-target-i386-Filter-FEAT_7_0_EBX-TCG-features-too.patch [bz#1382122]
- kvm-target-i386-Filter-KVM-and-0xC0000001-features-on-TC.patch [bz#1382122]
- kvm-target-i386-Define-TCG_-_FEATURES-earlier-in-cpu.c.patch [bz#1382122]
- kvm-target-i386-Loop-based-copying-and-setting-unsetting.patch [bz#1382122]
- kvm-target-i386-Loop-based-feature-word-filtering-in-TCG.patch [bz#1382122]
- kvm-spice-remove-spice-experimental.h-include.patch [bz#1430606]
- kvm-spice-replace-use-of-deprecated-API.patch [bz#1430606]
- Resolves: bz#1368375
  ([Intel 7.4 Bug] qemu-kvm does not support “-cpu IvyBridge”)
- Resolves: bz#1382122
  ([Intel 7.4 FEAT] KVM Enable the avx512_4vnniw, avx512_4fmaps instructions in qemu)
- Resolves: bz#1430606
  (Can't build qemu-kvm with newer spice packages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
</package>
<package pkgid="3e2e817a3d2becc2f5ddede61c1494a7a490f489a0c0503433a7206e12d56ca2" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
</package>
<package pkgid="39e315f590eb3d2aee67b913f0687ad1d6a6214832c232a4b828f8a0a41a885b" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
</package>
<package pkgid="31ed038133b821eebdf8538692f88f075231ce06fa05fd7e7c1db3902c0f35a9" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
</package>
<package pkgid="23b0fd0c4387376ce20ad08d9769948e269974f769ffab1ca71a4addf4e07edc" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.6" date="1513252800">- Fix CVE-2017-5715</changelog>
</package>
<package pkgid="859001ecf1be483290a0786b5d219c02efd99dca06a8e9c6ba63c2fe3dac7ae2" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-133.el7" date="1489060800">- kvm-target-i386-add-Ivy-Bridge-CPU-model.patch [bz#1368375]
- kvm-x86-add-AVX512_4VNNIW-and-AVX512_4FMAPS-features.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Kill-unused-code.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-level.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-CPU-v.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-xleve.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Set-all-feature-words-.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Fill-feature-words-in-.patch [bz#1382122]
- kvm-target-i386-kvm_check_features_against_host-Kill-fea.patch [bz#1382122]
- kvm-target-i386-Make-TCG-feature-filtering-more-readable.patch [bz#1382122]
- kvm-target-i386-Filter-FEAT_7_0_EBX-TCG-features-too.patch [bz#1382122]
- kvm-target-i386-Filter-KVM-and-0xC0000001-features-on-TC.patch [bz#1382122]
- kvm-target-i386-Define-TCG_-_FEATURES-earlier-in-cpu.c.patch [bz#1382122]
- kvm-target-i386-Loop-based-copying-and-setting-unsetting.patch [bz#1382122]
- kvm-target-i386-Loop-based-feature-word-filtering-in-TCG.patch [bz#1382122]
- kvm-spice-remove-spice-experimental.h-include.patch [bz#1430606]
- kvm-spice-replace-use-of-deprecated-API.patch [bz#1430606]
- Resolves: bz#1368375
  ([Intel 7.4 Bug] qemu-kvm does not support “-cpu IvyBridge”)
- Resolves: bz#1382122
  ([Intel 7.4 FEAT] KVM Enable the avx512_4vnniw, avx512_4fmaps instructions in qemu)
- Resolves: bz#1430606
  (Can't build qemu-kvm with newer spice packages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
</package>
<package pkgid="4935f2dcf9b8026d329a402256617ea3061dc62f9c4f8056e339259bba20bbde" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
</package>
<package pkgid="6aa89963a09fb2a05c739563b8082f9f4c6f5fcb0782dcc1bec2fd93d07a599c" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
</package>
<package pkgid="c9ed72439aa780e3ffde2963e6936f7d9e4a221196ea2cfc1d9202db9a587fd3" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
</package>
<package pkgid="13878b007c7d9850b208f5c159385f4af4355f0ddfc5d3bc9f4d1cead900253b" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.6" date="1513252800">- Fix CVE-2017-5715</changelog>
</package>
<package pkgid="df5523fe734142386536361c265011a6f9288d1fbe6fae6d9e03160abbd1499f" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-133.el7" date="1489060800">- kvm-target-i386-add-Ivy-Bridge-CPU-model.patch [bz#1368375]
- kvm-x86-add-AVX512_4VNNIW-and-AVX512_4FMAPS-features.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Kill-unused-code.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-level.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-CPU-v.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-xleve.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Set-all-feature-words-.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Fill-feature-words-in-.patch [bz#1382122]
- kvm-target-i386-kvm_check_features_against_host-Kill-fea.patch [bz#1382122]
- kvm-target-i386-Make-TCG-feature-filtering-more-readable.patch [bz#1382122]
- kvm-target-i386-Filter-FEAT_7_0_EBX-TCG-features-too.patch [bz#1382122]
- kvm-target-i386-Filter-KVM-and-0xC0000001-features-on-TC.patch [bz#1382122]
- kvm-target-i386-Define-TCG_-_FEATURES-earlier-in-cpu.c.patch [bz#1382122]
- kvm-target-i386-Loop-based-copying-and-setting-unsetting.patch [bz#1382122]
- kvm-target-i386-Loop-based-feature-word-filtering-in-TCG.patch [bz#1382122]
- kvm-spice-remove-spice-experimental.h-include.patch [bz#1430606]
- kvm-spice-replace-use-of-deprecated-API.patch [bz#1430606]
- Resolves: bz#1368375
  ([Intel 7.4 Bug] qemu-kvm does not support “-cpu IvyBridge”)
- Resolves: bz#1382122
  ([Intel 7.4 FEAT] KVM Enable the avx512_4vnniw, avx512_4fmaps instructions in qemu)
- Resolves: bz#1430606
  (Can't build qemu-kvm with newer spice packages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
</package>
<package pkgid="7cbd12217117cfe655fe55b2d571ccb386177dbc9cdba71cdd950087d398b9d3" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
</package>
<package pkgid="d00d52651b7fdf2ea531bd988e925dc708f80875bc687df5920bdc887e17fce6" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
</package>
<package pkgid="0a47ad53c6e81aaefadd74f4d82784b430e2c00f9778b413250b4ad719f021df" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
</package>
<package pkgid="523437f73826dc3ce4af3f3e01af14da4926f1dc2937efa87e0ae107fe28fa40" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.6" date="1513252800">- Fix CVE-2017-5715</changelog>
</package>
<package pkgid="60cb64f3f13b68b7936fefd42a07d56643b422cc23f1bf173a5e3eb8ad5f0c99" name="qt" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="16acf36438ae4832ef3766d5e0514175276f43a15b96c324e36a7c561cc7bd06" name="qt" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="d3c61f16eef4d91a9aae8087643dc279b6bdfd72ad32b1b67d64df02127eb04f" name="qt-assistant" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="59e25d5059492a67212f89b6f13ec24817b71b94ef27da28c26e407b0bd168b0" name="qt-config" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="929560ca98206a0194d74496e0c0e14b8e47a3c6817b4c843172f4eb4f327a8e" name="qt-demos" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="317ae8c6651037f48dcc3d5320b3583bb5f5e6c1f4076e9dcbcfa731857dbafc" name="qt-devel" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="8470bfbfad833f77b4667c622c9420544c3378f86c438d227579b55709cddffa" name="qt-devel" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="cba2d067c7a3ab153cf5434636a796896f7bbd84ab496cfb9d1c1e0cdde15b86" name="qt-devel-private" arch="noarch">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="6e11088dc51d1e949e738a59a8991fab1792d3d92444a480d07103eb66192f1c" name="qt-doc" arch="noarch">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="74ce98466a9bd61551f89e4246cc5a535fe52f16052d46ccf18dea1501de3bdf" name="qt-examples" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="3c49c7cec54b1185d0f4d94445d665ee7e776cfd4e6ed55195c833274c3ae6d6" name="qt-mysql" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="b76b693eaac1c88a451f7f4e9dac4499bbf1ab6235ff5ebbbbcc3da6485b1b59" name="qt-mysql" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="4980abda7a24f98b74979cf347d4e89d87a5fd2c8413d6d55c1cd9131478d22b" name="qt-odbc" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="a5d6a021aa14aa0238e6e7e5598a9be61c7be13bc2efc7f004ce9c5d5345a382" name="qt-odbc" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="f3954d6da90721308673a1b963a3632465c1abad2260a6ed96b3a99f03499307" name="qt-postgresql" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="2e7d2e523a9ce9ae0a53af0045d972c9bc2cb3ac10555a9a8b10682dd70392ca" name="qt-postgresql" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="9146e546420a1c318bde4c55aafeb83d86473f094b6a48b6390d8d737472b3b9" name="qt-qdbusviewer" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="3117fd5d867a852f93716f18bc963ad628c04d13ae31af6e27cab3c8d95b57c3" name="qt-qvfb" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="44689d28a2cbba9dde0c580206b152475acdeb3a22fb21b801825e11d5b56f93" name="qt-x11" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="86ad2dfdbb27372957c30e1f502e5891211306c7c1705ded62f281210ba035be" name="qt-x11" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="e98b3a4d155dcef7931164b37e8df3b321e94262bfff8c3fbbf7e00e679da887" name="quagga" arch="i686">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="53d4e08026625718fb83849625958fa8813dc408497ec0e8e6326e46a7bd901d" name="quagga" arch="x86_64">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="e8c50a6476e73e1ebe0d48f1b0758119a422a1b87b94fa77e43c59799b9576ee" name="quagga-contrib" arch="x86_64">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="f902e63b7bc96c9c4758acdb91022180bcfb1e64d9f5a3053b385113885c5d3d" name="quagga-devel" arch="i686">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="3525af385486d4177f39be0fb09f882221625dc6bed3194254c4c82200b5a946" name="quagga-devel" arch="x86_64">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="d20bd26d5ce020312db631a51a41fe69b82a1903ec1b93d5bda9652e77a63863" name="rear" arch="x86_64">
  <version epoch="0" ver="2.00" rel="3.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; 1.17.0-2" date="1431518400">- Fix Source tag
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
</package>
<package pkgid="3e100c325af7b2efd4e65005b351e0c2c866fd436fa274fab06681b68a8e13a2" name="rear" arch="x86_64">
  <version epoch="0" ver="2.00" rel="4.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
</package>
<package pkgid="76ee8deb10334ca36422adcad90b7c61f655079a0a164d32ae314c0f2279aa96" name="rear" arch="x86_64">
  <version epoch="0" ver="2.00" rel="5.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1518782400">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231</changelog>
</package>
<package pkgid="a274419b46cd9589dd5ad71d24ba468d7527c6075606af586dede926df14e797" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.7" date="1516190400">- NovaEvacuate: add support for keystone v3 authentication

  Resolves: rhbz#1535394</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.8" date="1516708800">- sap_redhat_cluster_connector: fix unknown gvi function

  Resolves: rhbz#1537444</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.11" date="1519732800">- galera: fix temp logfile rights to support MySQL 10.1.21+

  Resolves: rhbz#1547142</changelog>
</package>
<package pkgid="91ed71609aced6f3be130d9d841ec2f97972153f8ed1a322c61e4595af65b8ff" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-96" date="1493208000">- IPaddr2: add "preferred_lft" parameter for IPv6

  Resolves: rhbz#1445861</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
</package>
<package pkgid="4d266db0549b77a2b1baf9d717b281fe4c76879fbaabe8413d6fd7d4115c5458" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
</package>
<package pkgid="d2739ba5466e11061802a8631c1a1259d69fcddaeb2fbc79277cdeef661ae55a" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
</package>
<package pkgid="77255d83f584df0117a0c134c5cd7510db1f429d87f494de0246d8676c4bcbcf" name="resource-agents-sap" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.7" date="1516190400">- NovaEvacuate: add support for keystone v3 authentication

  Resolves: rhbz#1535394</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.8" date="1516708800">- sap_redhat_cluster_connector: fix unknown gvi function

  Resolves: rhbz#1537444</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.11" date="1519732800">- galera: fix temp logfile rights to support MySQL 10.1.21+

  Resolves: rhbz#1547142</changelog>
</package>
<package pkgid="1426779442f0fc9e3b400f96accdddbd5602f20e8e5c6dfd04a5e377a6634766" name="resource-agents-sap" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-96" date="1493208000">- IPaddr2: add "preferred_lft" parameter for IPv6

  Resolves: rhbz#1445861</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
</package>
<package pkgid="431c33e6a20fc143fae40dc808d60b43bc72c248a8cbc8872c1a64f1ecb7ee47" name="resource-agents-sap" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
</package>
<package pkgid="55f4f6a12b8c3de178b6b104e066f95112971f8a90a32d0be064c44c2dbf628e" name="resource-agents-sap" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
</package>
<package pkgid="326c7f6808b70f956b278acfa89c8667c5c3aa08091e5d1806cf3a4d0a867d66" name="resource-agents-sap-hana" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.7" date="1516190400">- NovaEvacuate: add support for keystone v3 authentication

  Resolves: rhbz#1535394</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.8" date="1516708800">- sap_redhat_cluster_connector: fix unknown gvi function

  Resolves: rhbz#1537444</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.11" date="1519732800">- galera: fix temp logfile rights to support MySQL 10.1.21+

  Resolves: rhbz#1547142</changelog>
</package>
<package pkgid="d65835d58d0d647c7cf1ecc3d9db2f8d8e02325dcab8bc62a73e183b6137e541" name="resource-agents-sap-hana" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-96" date="1493208000">- IPaddr2: add "preferred_lft" parameter for IPv6

  Resolves: rhbz#1445861</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
</package>
<package pkgid="ee0528ae9aabe133597fb6d54e727fd364d8bbe896c0904cb45a3a8e13277439" name="resource-agents-sap-hana" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
</package>
<package pkgid="087be5d85b80e99a9a8a060101f6010915860bf9876f4694c7006b2f612857c2" name="resource-agents-sap-hana" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
</package>
<package pkgid="fda3a0b0fb2ae099f7c6e3feae26940f921ee3b8ca615b0a74bf227ce70a8c5c" name="ruby" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="fd5d1c09869d4565cd138cecff4a9335b46361a545b5b14292931042344fca0a" name="ruby-devel" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="20e354f559fdbeeb977b014d38e6ff02510b00c9c61101a67f578e0ccabdde07" name="ruby-doc" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="df06df5ba64a9d1bfb1cd6feb6342b3fbdf1e2d2b39a4acfa06a9cc70b36b9e2" name="ruby-irb" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="7fce11548c5ac741dc084a52fc6e99439905dc0fd0242903eb628782a9b1e729" name="ruby-libguestfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="f691c689e48b6641da590b320e064ad1f4159d82a66bfba5994056f1bf7941c9" name="ruby-libs" arch="i686">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="468b4c784739c78d7fe42b82285c9ecbd64f495a96d38a3e2938b6c87d6aab04" name="ruby-libs" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="c420808ba41434c409311c1e428f6a0cbea94dee094d03b129c5f6855c8640cd" name="ruby-tcltk" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="077e3cd4e95f97275a3252e5c67d1f4598a937e016006df2bd8deaa448d7fb25" name="rubygem-bigdecimal" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="b497e31865f3203556c68c8a338469eae8167b77f641582eee1b1d30352e29fa" name="rubygem-io-console" arch="x86_64">
  <version epoch="0" ver="0.4.2" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="98e691feef6fb88e3f4c738313d8aadff1f8aa0cabefde516ef4c4d1e86f2516" name="rubygem-json" arch="x86_64">
  <version epoch="0" ver="1.7.7" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="a00e3147b26588e278ab21cab5f63daaf96fe9e855592b9ecf4af4985462f575" name="rubygem-minitest" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="f6ff28e43df0ce6e02f34b7bec7f0a4209abe8defb6b569cec57293a00db9758" name="rubygem-psych" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="92bc4a48158171e2334fc15a64020e82b73dfd6e30df0df97b8ca5457f9eb91a" name="rubygem-rake" arch="noarch">
  <version epoch="0" ver="0.9.6" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="5a6087847fd19608b695eed56063d081274921ebd53261fbfdd00cc882f84930" name="rubygem-rdoc" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="8f0e8f766f9b719618aeffc8f506e274bc99bff565c2bbeccedb2f8e27a3cb6a" name="rubygems" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="f559dc04f879344067b2853ba5b772fd6a79a971107bf899fd51733570b0a3e9" name="rubygems-devel" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="3c8706803efc7bd7b2b81062e427167dffc71cdc9bd2bed12e7e213248aa0e61" name="runc" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="14.rc4dev.git84a082b.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-3.rc2" date="1487937600">- Resolves: #1426674
- built projectatomic/runc_rhel_7 commit 5d93f81</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-4.1.gitee992e5" date="1489665600">- built @projectatomic/master commit ee992e5</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-7.1.gitf8ce01d" date="1492084800">- Resolves: #1429675
- built @opencontainers/master commit f8ce01d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-8.1.gitf8ce01d" date="1493985600">- Resolves: #1441737 - enable kernel sysctl knob /proc/sys/fs/may_detach_mounts</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-9.1.gitf8ce01d" date="1494331200">- Resolves: #1447078 - change default root path
- add commit e800860 from runc @projectatomic/change-root-path</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-10.1.gitf8ce01d" date="1497268800">- Resolves: #1441737 - run sysctl_apply for sysctl knob</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-11.1.gitf8ce01d" date="1497355200">- correct previous bogus date :\</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-12.1.gitf8ce01d" date="1497355201">- disable s390x temporarily because of indefinite wait times on brew</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-13.rc3.gitd40db12" date="1497355202">- Resolves: #1479489
- built commit d40db12</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:1.0.0-14.rc4dev.git84a082b" date="1506081600">- rebase to 84a082bfef6f932de921437815355186db37aeb1</changelog>
</package>
<package pkgid="62b3ef7ea12338513cf61c755777baeb145ba126fcc3cfd10ca57cf77a3be53c" name="runc" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="21.rc4.dev.gitaea4f21.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-12.1.gitf8ce01d" date="1497355200">- disable s390x temporarily because of indefinite wait times on brew</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-13.rc3.gitd40db12" date="1497355201">- Resolves: #1479489
- built commit d40db12</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1.0.0-14.rc4dev.git84a082b" date="1506081600">- rebase to 84a082bfef6f932de921437815355186db37aeb1</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1.0.0-15.rc4dev.gitaea4f21" date="1508155200">- Use the same checkout as Fedora for lates CRI-O</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-16.rc4.dev.gitaea4f21" date="1508414400">- correct the release tag "rc4dev" -&gt; "rc4.dev" cause I'm OCD</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.name&gt; - 1.0.0-17.rc4.gitaea4f21" date="1508932800">- Add container-selinux prerequires to make sure runc is labeled correctly</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-18.rc4.dev.gitaea4f21" date="1509710400">- enable debuginfo</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-19.rc4.dev.gitaea4f21" date="1510056000">- disable debuginfo temporarily</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-20.rc4.dev.gitaea4f21" date="1510056001">- use Makefile</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-21.rc4.dev.gitaea4f21" date="1510228800">- enable debuginfo and include -buildmode=pie for go build</changelog>
</package>
<package pkgid="480a88dab5bdb6d9ba3e772eb416a0f3d4c2254f0ae31402f27cfb3ef700becc" name="runc" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="23.rc4.dev.git1d3ab6d.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1.0.0-14.rc4dev.git84a082b" date="1506081600">- rebase to 84a082bfef6f932de921437815355186db37aeb1</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1.0.0-15.rc4dev.gitaea4f21" date="1508155200">- Use the same checkout as Fedora for lates CRI-O</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-16.rc4.dev.gitaea4f21" date="1508414400">- correct the release tag "rc4dev" -&gt; "rc4.dev" cause I'm OCD</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.name&gt; - 1.0.0-17.rc4.gitaea4f21" date="1508932800">- Add container-selinux prerequires to make sure runc is labeled correctly</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-18.rc4.dev.gitaea4f21" date="1509710400">- enable debuginfo</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-19.rc4.dev.gitaea4f21" date="1510056000">- disable debuginfo temporarily</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-20.rc4.dev.gitaea4f21" date="1510056001">- use Makefile</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-21.rc4.dev.gitaea4f21" date="1510228800">- enable debuginfo and include -buildmode=pie for go build</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.name&gt; - 1.0.0-22.rc4.git1d3ab6d" date="1512907200">- Many Stability fixes
- Many fixes for rootless containers
- Many fixes for static builds</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-23.rc4.git1d3ab6d" date="1513080000">- Resolves: #1524654</changelog>
</package>
<package pkgid="adeb4c88141afe621060e07f530382cc557a2b52b756c77e1ceb8f279c46e94e" name="runc" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="26.rc4.dev.git9f9c962.el7"/>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.name&gt; - 1.0.0-17.rc4.gitaea4f21" date="1508932800">- Add container-selinux prerequires to make sure runc is labeled correctly</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-18.rc4.dev.gitaea4f21" date="1509710400">- enable debuginfo</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-19.rc4.dev.gitaea4f21" date="1510056000">- disable debuginfo temporarily</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-20.rc4.dev.gitaea4f21" date="1510056001">- use Makefile</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-21.rc4.dev.gitaea4f21" date="1510228800">- enable debuginfo and include -buildmode=pie for go build</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.name&gt; - 1.0.0-22.rc4.git1d3ab6d" date="1512907200">- Many Stability fixes
- Many fixes for rootless containers
- Many fixes for static builds</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-23.rc4.git1d3ab6d" date="1513080000">- Resolves: #1524654</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1.0.0-24.rc4.dev.gitc6e4a1e.1" date="1513339200">- rebase to c6e4a1ebeb1a72b529c6f1b6ee2b1ae5b868b14f
- https://github.com/opencontainers/runc/pull/1651</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-25.rc4.gite6516b3" date="1513598400">- built commit e6516b3</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.name&gt; - 1.0.0-26.rc4.git9f9c962" date="1516795200">- Bump to the latest from upstream</changelog>
</package>
<package pkgid="a219bb83270dd97b864c56266d16fa0f0899b7cc273fe02d400aa4e6a39a44b4" name="samba" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="0489cf867494637ce462ca3cbe7ff06048e8df4ccd9fe98e78615ae700734c17" name="samba" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="35e7adcea08c9cac299707655fe11259dec08bb20db110b4732b1e8961e45144" name="samba" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="2be0bca1679cdfafbf860bac75b9db67e67c899e3bdcc247d3ac545b1351c8d0" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="c2cb0a8ea39f1092db88813fd69260b20a4cb2433f64f6aba9090a602cbb4274" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="187a8a4b7941518257890e93579ba17bdd2e39d6ac2fa066014ada2e6ac774fd" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="7f548eeac5f21c172ea7a6b74ee6e6973935000fd5b1526c09c078bcd179897d" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="f593572d2a9e524bf172c8213f978ae5fdcd9393177d2bf62ca765a136cfbc3c" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="741017403e50461c59ac8ac5a3a3dddea0facc98d27f125ce3832348129b38c4" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="f9d78270b41d5405729be27808b8f0d1727803d851246a5c0ae82a4e75f03766" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="bf91abc2b9b474531031842614efc6460da5f479adadbcc43f5783557545c16a" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="32007edf4cd8e9e9eab82e2272d630c0820d2273c40e4efa6f1663dab93f794c" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="2b9ba47eadb73f6487b260b4fe7bc182677079b2ef8d0e65dd040e62dc54e8ff" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="7d0770ea3325435ba8361f9f1710034df819151d81a1b3be3b1bb180aa3d8feb" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="c67f4cea44ccd12feec8b5f2b89d1073d61c521aeff3ea42d479ab9029724dcb" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="8542422ff148793c0e8ce5970f54ee562dc61d7222345c84913943802f9ea5b3" name="samba-common-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="89f2988b57a5aa8b51e9038973015b608b0d5e87d1c021d97163c7d8829f6d3d" name="samba-common-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="15b8ab3850afe791a9a550c5ff38de164532f52cc73948cc8eb92607b7f7dcb3" name="samba-common-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="d1d0ef8990da61c1d511ce1133d53961cebb6ab8f84acd82c5c2552f85b286c4" name="samba-common-tools" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="794b8f617d6823acd4acb7170d78b86ab6d8bf6e2534330971dae4b868147d44" name="samba-common-tools" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="ebcf1afdef0b2bafb42bda0a962248b198533021d5914f6ab4fb5c9381f54a77" name="samba-common-tools" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="3f388cabe4123badc8951bc68215c2a476fac5db3a0121e8d6338cda8f2f39f0" name="samba-dc" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="c408400cd12cd8f115c3790c391dbdd6d703a25f00ec1cca7eafff308c04dfd2" name="samba-dc" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="0d77534f3d15ba67793c3bc591beee6af515f978a71c819db81b47ef13c2dcaa" name="samba-dc" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="e42b10eb99155f94222fdddad924e53b719d8cd1dd7a10f6d617106883304612" name="samba-dc-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="e8aa68055bcb814ceac85b99b479a2d654445bcf5b07cb96956fb0c84c769e93" name="samba-dc-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="c06d6a9ee26410670aa02f37a0dded726c1337467ab9a25283f81628b02961e3" name="samba-dc-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="754d4f3fc1c334d6005d8e4e922f6fe667d1f09bcdd1c24dcdfea66af8aa4686" name="samba-devel" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="5d9aafab77c2a9d106a8a1d37f34cbf62a6d59557392edd877b146bd20bd0073" name="samba-devel" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="bba37237c5df4da6dcdbb25916a485e2ad0445addb6b14222f62639d8da0c662" name="samba-devel" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="131dec3a49ba0ec0aa8e809a4e31fe18c4b2711ee0f13a28bc3117c3f1c6c970" name="samba-devel" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="77b51659702c040ac54ffc9efdeb6493db948dda783492dcaddf152e6623bf83" name="samba-devel" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="de9a737456d2c442023a16f378d8b86ec0a874985f8646022412e5e98abe560a" name="samba-devel" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="5c1bfdc61bedaf8c871c1e38c10f950487ec7152fe3a1ad3ad2a57514268790d" name="samba-krb5-printing" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="d7af76568a30cb9885e541db1dcd4f42e18dbb47fd24751b771fa30ce0ad0ff9" name="samba-krb5-printing" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="1f16f435dd5bd3cf26e1b1963a36f1fe74e789992ec8123481758d95012fc241" name="samba-krb5-printing" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="937aba19daae3c58054e346b0e2752a9f5491c3d6c8717cbce65699386869ea6" name="samba-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="0a059469cfedece7c6d408d969db8087cdc74806630f6b1243d0999273f522bd" name="samba-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="397d736c0eae9f5559d8aa4cd3db5aec07130f6caef35608353a112e199f47e1" name="samba-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="13464bdada507c5f4d52960df450ecdf25d0bc63cedec329a127f0793f63953e" name="samba-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="328eeeec28f3a38758bbcaab6b6976452254d4263fae99d341ab661ba76da41c" name="samba-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="cad62720f9702980dbc39cd8eef9db3763ee685f3a423eb98d4b7a6d531a3dad" name="samba-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="61d8ad52dac077b98e29c513099be2dddae476738f4ec4ced46f4624578d9263" name="samba-pidl" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="e65e913a43118bb365574d80e2adb0ef16488e87e4c9fa7a2f44a55ba449e7b6" name="samba-pidl" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="de508565cd32ec97ee27538cedf3c182a936c72f317d8e213347f54ac98c2991" name="samba-pidl" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="427a998457f7fc5dd9d2e1ba2d8b8b53701ff4d87dc010c7e5e6ef4b1c9a36bf" name="samba-python" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="78a03794daad8f4e3e6784d631e4de425b5fc448b57768ab0c8ea16b92c5d960" name="samba-python" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="38df1af1435f30df56afb371f25527adeb23f2f938abaa3af5eb494041750738" name="samba-python" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="d35ed4e70dd4854edce118df69aa89398b61396e1a53dfcf1b18367d80ab9df9" name="samba-test" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="73973fa1b37209fe5c0c11ffb6688dcd6a770b28dcef003c48b55f7c8adeb99d" name="samba-test" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="3bc00d27d968e5b08656a1c0ae97b1f52124304eaf258e96edcd0973924ba407" name="samba-test" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="d29077c3141924cb8a320cdc2eafa5c3d1d2c8d1868d9ace9e61060d32c77477" name="samba-test-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="15a1ac9d9568b3e4a0530c2372fc49a11f066bab206f2093483ff893e34659f7" name="samba-test-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="aa791f5346b3cf0ba4bada50fc310087c57b910a3830f8b1e7c534a8dec70dee" name="samba-test-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="218a93e44c79b0028a68b2317546edf812bab54b5c3556a0885fe92dd686401c" name="samba-test-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="3a5ff88f1756ccf1e0ad957581cb69b2946f3d263bde5ae8605b7d839eccf8cc" name="samba-test-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="7ca0886d538902244494f6548007c892e0f60a07eea112992c0df3d8f7c4157e" name="samba-test-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="43ac1a02dca4a4242ea714e6645e012848bc32d99ad1f8383cd727bea10a711e" name="samba-vfs-glusterfs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="7b441236e245c7c0160ae467792f86b465259fd371a912883dfe86db19bdf53d" name="samba-vfs-glusterfs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="130b733dd8155c5f97f0a12f6cbe7625fb96cf030dc4797ef71becbbad2f4920" name="samba-vfs-glusterfs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="0772f46b3958bae9d2a7bca775d8587076ef42a2f45e9ea135b3f71959fddf99" name="samba-winbind" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="d37f6b5e018c863ad87efdf135d3c19e7fe302c12877f4a3c41e07583bbcf139" name="samba-winbind" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="a8964343f27e1961aa01987893991c5708ed81b97e5e1f9d5b4861bd9e1ef5dc" name="samba-winbind" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="ffd532fde9debe693888b1190b24226b90fcbbe6ec7ce84d20db9bbdbd570b3c" name="samba-winbind-clients" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="ebb915ac0078014b6472da7693ed33e3349b271635f478a1f5778432cf50e66e" name="samba-winbind-clients" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="8fdff1ab97272693d56ecf5c9fd2899ee3fb962d018f95aa9f6c2a2c0f2fad07" name="samba-winbind-clients" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="ba082aeb6d492daeda29c95f81b4cf651c2145b56b850b5e7c0761667d118970" name="samba-winbind-krb5-locator" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="04098ec4cee9c2a0e46a75401808b3c061204592cd9d0f967c9ba0e108ba7803" name="samba-winbind-krb5-locator" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="73ca5a1538c563dcacd2c8815db252357316458d14b28febeea0bdea53d8ccff" name="samba-winbind-krb5-locator" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="0a14060e6c549558ad54b6b0b37a452a57c0bbc14fbc8df39e036baf04b599f4" name="samba-winbind-modules" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="c56556d1e7248e5b069634736706a71a02e2ba00c5c817e8c3c69bbc0f5f9b88" name="samba-winbind-modules" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="10a1e7dc486b7ded083c2653aafe46e091a66a340bf192db963c68c78c10a2ea" name="samba-winbind-modules" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="3cdf5b8ce736e24236f7daf1c41e8ffc9f58d7a69c028397aa42ca862f895176" name="samba-winbind-modules" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="10e961da978092e6b1858bf2834fb58b1d530308dcdb1ac4d3280be12d80c3a7" name="samba-winbind-modules" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="d17d84ee407f45344fc73b1f0fc03d5e2e200a2da06d7b1cab668c69cc8cad26" name="samba-winbind-modules" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="81cd81d30611810bc4f65e0cb249b76d5dada16cbc8c40003852a8adbb4d5579" name="sblim-gather" arch="i686">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="e4e73f2ff8bb3aa3317a9131188d6232c1eeb945bc3037502aae3b5b4297575c" name="sblim-gather" arch="x86_64">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="54dc1067d73a9663f07fd5886fa651672b7885de8e814687656faf20e2511919" name="sblim-gather-devel" arch="i686">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="935a31f867b9cef938928f6b3d46917fe65ebe91d696873e1440aede20563e02" name="sblim-gather-devel" arch="x86_64">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="a2933869c69ec59a17064b93a605357d0bfe38c2f52149b994abf9e9d131850a" name="sblim-gather-provider" arch="i686">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="8cbf1d9c1810b1a33d091ebb8fdb1f8d8cd43e8b4ad3600666c432174f26ba48" name="sblim-gather-provider" arch="x86_64">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="2ec94644778de0776dae662e111de64c19b7f728ac8c22a21d522301108ca28a" name="sblim-gather-test" arch="x86_64">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="ae89fda661e85a41ea63fe31a2bbf4d58ccebf34b224378f6773710ec83b4a28" name="scap-security-guide" arch="noarch">
  <version epoch="0" ver="0.1.33" rel="6.el7_4"/>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.30-4" date="1485864000">- Correct remediation for SSHD which caused it not to start (RH BZ#1415152)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.30-5" date="1487073600">- Fix template remediation function used by SSHD remediation
- Reduce scope of patch that fixes SSHD remediation (RH BZ#1415152)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.30-6" date="1489147200">- Ship separate OCIL definitions for Red Hat Enterprise Linux 7 (RHBZ#1428144)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.32-1" date="1490702400">- Update to upstream version 0.1.32
- New CMake build system
- Improved NIST 800-171 profile
- Initial RHVH profile
- New CPE to identify systems like machines (bare-metal and VM) and containers (image and container)
- Template clean up in lots of remediations</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-1" date="1493640000">- Update to upstream version 0.1.33
- DISA RHEL7 STIG profile alignment improved
- Introduction of remediation roles
- RPM and DEB test packages are built by CMake with CPack
- Lots of remediation fixes</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-2" date="1495195200">- Fix emtpy ospp-rhel7 table
- Fix Anaconda remediation templates (RHBZ#1450731)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-3" date="1495195201">- Fix malformed title of profile nist-800-171-cui</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-4" date="1495195202">- Fix specfile to not include tables twice</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-5" date="1497441600">- Fix Anaconda Smartcard auth remediation (RHBZ#1461330)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-6" date="1505822400">- Dropped remediation that makes system not accessible by SSH (RHBZ#1478414)</changelog>
</package>
<package pkgid="69915765d72805b9841369f17fbddefc2fc842c9f1a8edc77e1498205e1eb512" name="scap-security-guide-doc" arch="noarch">
  <version epoch="0" ver="0.1.33" rel="6.el7_4"/>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.30-4" date="1485864000">- Correct remediation for SSHD which caused it not to start (RH BZ#1415152)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.30-5" date="1487073600">- Fix template remediation function used by SSHD remediation
- Reduce scope of patch that fixes SSHD remediation (RH BZ#1415152)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.30-6" date="1489147200">- Ship separate OCIL definitions for Red Hat Enterprise Linux 7 (RHBZ#1428144)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.32-1" date="1490702400">- Update to upstream version 0.1.32
- New CMake build system
- Improved NIST 800-171 profile
- Initial RHVH profile
- New CPE to identify systems like machines (bare-metal and VM) and containers (image and container)
- Template clean up in lots of remediations</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-1" date="1493640000">- Update to upstream version 0.1.33
- DISA RHEL7 STIG profile alignment improved
- Introduction of remediation roles
- RPM and DEB test packages are built by CMake with CPack
- Lots of remediation fixes</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-2" date="1495195200">- Fix emtpy ospp-rhel7 table
- Fix Anaconda remediation templates (RHBZ#1450731)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-3" date="1495195201">- Fix malformed title of profile nist-800-171-cui</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-4" date="1495195202">- Fix specfile to not include tables twice</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-5" date="1497441600">- Fix Anaconda Smartcard auth remediation (RHBZ#1461330)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-6" date="1505822400">- Dropped remediation that makes system not accessible by SSH (RHBZ#1478414)</changelog>
</package>
<package pkgid="f6a43c15f8ae37fb9657e4eaa24118dc32a54a9327764b12c96d4357b2e4e683" name="scl-utils" arch="x86_64">
  <version epoch="0" ver="20130529" rel="18.el7_4"/>
  <changelog author="Lubos Kardos &lt;lkardos@redhat.com&gt; - 20130529-10" date="1417780800">- Allow to use vendor prefix in packages names
- Include %nfsmountable macro into scl's rpm macros file</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-11" date="1418385600">- renamed %scl_pkg_prefix to %scl_full_prefix (#1167042)</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-12" date="1418385601">- the second half of the macro rename</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-13" date="1420459200">- after a thorough discussion with scl maintainers, revert the vendor prefix
  in package names</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-13" date="1420545600">- bump the version to get in sync with 7.1 branch
- Reflect the state of %nfsmountable macro in collections' rpm macro files
- escape all the % chars in changelog</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20142529-14" date="1420545601">- remove the vendor prefix from %scl_install</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-15" date="1422360000">- fixed wrong syntax of or-operator in scl.attr</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-16" date="1425556800">- Remove /scls/ from macros  _sysconfdir, _sharedstatedir and _localstatedir</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-17" date="1425556801">- Remove /uucp/ from directory structure.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 20130529-18" date="1484308800">- fix "scl enable" usage in shebang lines (#1372700)</changelog>
</package>
<package pkgid="059e61e16a81c0664c9c4f51663dfdee02fbc18602b0c2cd1f39499eda93f2ad" name="scl-utils-build" arch="x86_64">
  <version epoch="0" ver="20130529" rel="18.el7_4"/>
  <changelog author="Lubos Kardos &lt;lkardos@redhat.com&gt; - 20130529-10" date="1417780800">- Allow to use vendor prefix in packages names
- Include %nfsmountable macro into scl's rpm macros file</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-11" date="1418385600">- renamed %scl_pkg_prefix to %scl_full_prefix (#1167042)</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-12" date="1418385601">- the second half of the macro rename</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-13" date="1420459200">- after a thorough discussion with scl maintainers, revert the vendor prefix
  in package names</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-13" date="1420545600">- bump the version to get in sync with 7.1 branch
- Reflect the state of %nfsmountable macro in collections' rpm macro files
- escape all the % chars in changelog</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20142529-14" date="1420545601">- remove the vendor prefix from %scl_install</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-15" date="1422360000">- fixed wrong syntax of or-operator in scl.attr</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-16" date="1425556800">- Remove /scls/ from macros  _sysconfdir, _sharedstatedir and _localstatedir</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-17" date="1425556801">- Remove /uucp/ from directory structure.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 20130529-18" date="1484308800">- fix "scl enable" usage in shebang lines (#1372700)</changelog>
</package>
<package pkgid="6df46f68164bf51bb91f88eff9aebcf8f7ba1e03b5216ec0afa1e7de27d12a49" name="seabios" arch="x86_64">
  <version epoch="0" ver="1.10.2" rel="3.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-3.el7" date="1461672000">- seabios-redhat-reserve-more-memory-on-fseg.patch [bz#1327060]
- seabios-redhat-turn-off-some-config-options.patch [bz#1327060]
- Resolves: bz#1327060
  ([Seabios]Limited boot number supported for SCSI/SATA)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-4.el7" date="1462968000">- seabios-Build-vgabios-virtio.bin.patch [bz#1327001]
- Resolves: bz#1327001
  (vgabios-virtio.bin should be included  in seavgabios-bin package)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-5.el7" date="1473940800">- seabios-pci-don-t-map-virtio-1.0-storage-devices-above-4G.patch [bz#1373154]
- Resolves: bz#1373154
  (Guest fails boot up with ivshmem-plain and virtio-pci device)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-5.el7_3.1" date="1480420800">- seabios-vgabios-Reorder-video-modes-to-work-around-a-Windows.patch [bz#1392028]
- Resolves: bz#1392028
  ([virtio-win][svvp][ws2016] cannot generate dump file when using nmi on ws2016 and win10-32/64)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.1-1.el7" date="1484049600">- Rebase to seabios 1.10.1 [bz#1392821]
- Resolves: bz#1392821
  (Rebase seabios to 1.10.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.1-2.el7" date="1486123200">- seabios-smm-disable-by-default.patch [bz#1378006]
- seabios-ahci-Set-upper-32-bit-registers-to-zero.patch [bz#1418320]
- Resolves: bz#1378006
  (guest paused on target host sometimes when do migration during guest boot)
- Resolves: bz#1418320
  (Seabios does not fully reset AHCI adapters)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhta.com&gt; - 1.10.2-1.el7" date="1489147200">- Rebase to 1.10.2 [bz#1392821]
- Resolves:  bz#1392821
 (Rebase seabios to 1.10.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.2-2.el7" date="1490875200">- seabios-resume-Don-t-attempt-to-use-generic-reboot-mechanism.patch [bz#1428347]
- Resolves: bz#1428347
  (reboot hangs on rhel6 machine types (~1/20 times))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.2-3.el7" date="1494590400">- seabios-blockcmd-accept-only-disks-and-CD-ROMs.patch [bz#1020622]
- seabios-blockcmd-generic-SCSI-luns-enumeration.patch [bz#1020622]
- seabios-virtio-scsi-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- seabios-usb-uas-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- Resolves: bz#1020622
  (seabios fail to recognize virtio-scsi device if specify LUN not 0)</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 1.10.2-3.el7_4.1" date="1501070400">- seabios-virtio-IOMMU-support.patch [bz#1472131]
- Resolves: bz#1472131
  (Guest OS will down when disk enable the IOMMU for Virtio)</changelog>
</package>
<package pkgid="366e1c555eda92b59aa1b2beb70d114ac8ad4c5535793ff1233a4affdfce3228" name="seabios-bin" arch="noarch">
  <version epoch="0" ver="1.10.2" rel="3.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-3.el7" date="1461672000">- seabios-redhat-reserve-more-memory-on-fseg.patch [bz#1327060]
- seabios-redhat-turn-off-some-config-options.patch [bz#1327060]
- Resolves: bz#1327060
  ([Seabios]Limited boot number supported for SCSI/SATA)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-4.el7" date="1462968000">- seabios-Build-vgabios-virtio.bin.patch [bz#1327001]
- Resolves: bz#1327001
  (vgabios-virtio.bin should be included  in seavgabios-bin package)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-5.el7" date="1473940800">- seabios-pci-don-t-map-virtio-1.0-storage-devices-above-4G.patch [bz#1373154]
- Resolves: bz#1373154
  (Guest fails boot up with ivshmem-plain and virtio-pci device)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-5.el7_3.1" date="1480420800">- seabios-vgabios-Reorder-video-modes-to-work-around-a-Windows.patch [bz#1392028]
- Resolves: bz#1392028
  ([virtio-win][svvp][ws2016] cannot generate dump file when using nmi on ws2016 and win10-32/64)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.1-1.el7" date="1484049600">- Rebase to seabios 1.10.1 [bz#1392821]
- Resolves: bz#1392821
  (Rebase seabios to 1.10.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.1-2.el7" date="1486123200">- seabios-smm-disable-by-default.patch [bz#1378006]
- seabios-ahci-Set-upper-32-bit-registers-to-zero.patch [bz#1418320]
- Resolves: bz#1378006
  (guest paused on target host sometimes when do migration during guest boot)
- Resolves: bz#1418320
  (Seabios does not fully reset AHCI adapters)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhta.com&gt; - 1.10.2-1.el7" date="1489147200">- Rebase to 1.10.2 [bz#1392821]
- Resolves:  bz#1392821
 (Rebase seabios to 1.10.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.2-2.el7" date="1490875200">- seabios-resume-Don-t-attempt-to-use-generic-reboot-mechanism.patch [bz#1428347]
- Resolves: bz#1428347
  (reboot hangs on rhel6 machine types (~1/20 times))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.2-3.el7" date="1494590400">- seabios-blockcmd-accept-only-disks-and-CD-ROMs.patch [bz#1020622]
- seabios-blockcmd-generic-SCSI-luns-enumeration.patch [bz#1020622]
- seabios-virtio-scsi-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- seabios-usb-uas-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- Resolves: bz#1020622
  (seabios fail to recognize virtio-scsi device if specify LUN not 0)</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 1.10.2-3.el7_4.1" date="1501070400">- seabios-virtio-IOMMU-support.patch [bz#1472131]
- Resolves: bz#1472131
  (Guest OS will down when disk enable the IOMMU for Virtio)</changelog>
</package>
<package pkgid="f443d0230ba63e6fe73a7e3b68d5a50f436808fa23f966e931bb524ce4a89581" name="seavgabios-bin" arch="noarch">
  <version epoch="0" ver="1.10.2" rel="3.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-3.el7" date="1461672000">- seabios-redhat-reserve-more-memory-on-fseg.patch [bz#1327060]
- seabios-redhat-turn-off-some-config-options.patch [bz#1327060]
- Resolves: bz#1327060
  ([Seabios]Limited boot number supported for SCSI/SATA)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-4.el7" date="1462968000">- seabios-Build-vgabios-virtio.bin.patch [bz#1327001]
- Resolves: bz#1327001
  (vgabios-virtio.bin should be included  in seavgabios-bin package)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-5.el7" date="1473940800">- seabios-pci-don-t-map-virtio-1.0-storage-devices-above-4G.patch [bz#1373154]
- Resolves: bz#1373154
  (Guest fails boot up with ivshmem-plain and virtio-pci device)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-5.el7_3.1" date="1480420800">- seabios-vgabios-Reorder-video-modes-to-work-around-a-Windows.patch [bz#1392028]
- Resolves: bz#1392028
  ([virtio-win][svvp][ws2016] cannot generate dump file when using nmi on ws2016 and win10-32/64)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.1-1.el7" date="1484049600">- Rebase to seabios 1.10.1 [bz#1392821]
- Resolves: bz#1392821
  (Rebase seabios to 1.10.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.1-2.el7" date="1486123200">- seabios-smm-disable-by-default.patch [bz#1378006]
- seabios-ahci-Set-upper-32-bit-registers-to-zero.patch [bz#1418320]
- Resolves: bz#1378006
  (guest paused on target host sometimes when do migration during guest boot)
- Resolves: bz#1418320
  (Seabios does not fully reset AHCI adapters)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhta.com&gt; - 1.10.2-1.el7" date="1489147200">- Rebase to 1.10.2 [bz#1392821]
- Resolves:  bz#1392821
 (Rebase seabios to 1.10.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.2-2.el7" date="1490875200">- seabios-resume-Don-t-attempt-to-use-generic-reboot-mechanism.patch [bz#1428347]
- Resolves: bz#1428347
  (reboot hangs on rhel6 machine types (~1/20 times))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.2-3.el7" date="1494590400">- seabios-blockcmd-accept-only-disks-and-CD-ROMs.patch [bz#1020622]
- seabios-blockcmd-generic-SCSI-luns-enumeration.patch [bz#1020622]
- seabios-virtio-scsi-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- seabios-usb-uas-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- Resolves: bz#1020622
  (seabios fail to recognize virtio-scsi device if specify LUN not 0)</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 1.10.2-3.el7_4.1" date="1501070400">- seabios-virtio-IOMMU-support.patch [bz#1472131]
- Resolves: bz#1472131
  (Guest OS will down when disk enable the IOMMU for Virtio)</changelog>
</package>
<package pkgid="511f2bed375bbaaea3b02b17afa9a3fe77081854df21ff446044360a9df4e8dd" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="15e35e350e5a059ffc150301bdf8526a9264833137e3cc54f8675acf13eca878" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="6176397fbb5ee15e46e840b8d5989762c53d9ff7c0e0e51bf768ccd776f378fe" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="a280bebc9a3c60bcba4f5ef897aff5102b14722fec60a049bea868abf83815fb" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="519438f9e6535ba154c2564f1782c29081bda925176bb00376e197af1ec663f0" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="a99d313f2d58ab3ccf97f99dc849a6cb2fc30af8511ec85bfcd2e80184f4cd9e" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="9cdab257eb77a2af696dd5d58f4fb152a0109a22e375d61faf46d040ef696643" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="de3c0069e06c442b1f5eb13d67e4cc9c5447859732322d39eced4a78a72a83f9" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="21ab2146ffc95c6b1c139947c54b2787876dc95c4c77dcec5c3adcadc027b6ab" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="968135eef4aa2c264bc1900f5c64d9f12ca9b456c50fbdbe42f1082bcee97fe6" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="16b9d85388e13ce1702ee92bad7bcedaad95f169f305e7cc4dcfc140370675d0" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="4963662e1624d8ffd20ed161704255872d2cbc1c4415809360cc999c635cad3f" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="83bb23b90557352e219baf6c85d9ef45d300923f549492f63694173a2fad4e3f" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="79d9c312f636adcbef8c9edcfa02522cb78a3b2e0a6cbfb964b4def7dd3f037a" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="c0d004c3922520a4d466c125b86a3f8dbe63a8680700d3dbf38f3cc60f1422e3" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="91f7ac4ad1d9a0a6391addb88f30e9aa6f1d3481ba071ebaa8cd108361a6a9da" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="900abc45dc0d8aa53b48f02a84b803282dce9947794b858184b627b7b9cec191" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="6720df51c1fd85e3d851ccb884cf2f9c2693159e44a8a063f00605ec204e483b" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="30f02ede2b20b5f77fee8766a8afb6a9429cee903cbae211a61ede89c8cda945" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="68a7753ac3f35c02a79eb608d94983b55d52051e9b795acaee386e3ff1b9b35e" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="ce6c55640f961ca7e33661750fbf58aefeb4b63ee086bbe0f9744641d91d01ab" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="e936d86f04fdb078b6e0ede751e54dba55f60a0b332af865ade15812f6355cef" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="832deb4505abb3804c7368faf54ddeef96b41b6f7926a6daee8a63fa23416008" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="26143d0911197a661cbc90308965fd8d627a3beadd7dc70890754496c9637199" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="a40278795c5c8527e58418ae151813c8d01eb84996843e253243ce9a3baecd93" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="b0cad3ae990036fb0f925760393c380585f00683f3baab1cb0b35149fd979cab" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="f324cd03c525dc90c502bc291be29a980ba5fa83cd4754af2a6a7c5c6fa8a4f2" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="ccf5b083d6f70d867deb56a245e4a5d7640fd3a03c2832cdb6d196084770cc04" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="543f4c54cc9d9b64aafb4ad661595b71f2c50688084e88f420105008c0383138" name="skopeo" arch="x86_64">
  <version epoch="1" ver="0.1.24" rel="1.dev.git28d4e08.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.17-0.7.git1f655f3" date="1479816000">- runtime dep was missing epoch value, added now</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.17-1" date="1481630400">- Resolves: #1404274 - ship upstream v0.1.17 release
- built commit b3b4e2b</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.18-1" date="1486123200">- btrfs-progs-devel, device-mapper-devel added to build dependencies
- built commit b08008c</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.18-1.1" date="1490616000">- rebuilt for all arches on extras 7.4
- enable debuginfo package</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.18-1.2" date="1490875200">- build for all available arches (previous build didn't do this)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.19-1.1.git62e3747" date="1490875201">- bump to v0.1.19
- built commit 62e3747</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.20-1.1.gite802625" date="1496750400">- built commit e802625b7cb7f4af9ab77bd2be9eb441ff2f28a2</changelog>
  <changelog author="Ryan Hartman &lt;rhartman@redhat.com&gt; - 1:0.1.20-2.1.gite802625" date="1498824000">- bump release to 2.1
- built commit e802625b7cb7f4af9ab77bd2be9eb441ff2f28a2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.23-1.git1bbd87f" date="1502107200">- Resolves: #1455575, #1478416, #1387217
- bump to v0.1.23</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.24-1.dev.git28d4e08" date="1507291200">- Resolves: #1499274
- built commit 28d4e08</changelog>
</package>
<package pkgid="0f0c9309e55595676a055b09645449b3788c075e705dc7792b2cbb1455988ef6" name="skopeo" arch="x86_64">
  <version epoch="1" ver="0.1.26" rel="2.dev.git2e8377a.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.23-1.git1bbd87f" date="1502107200">- Resolves: #1455575, #1478416, #1387217
- bump to v0.1.23</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.24-1.dev.git28d4e08" date="1507291200">- Resolves: #1499274
- built commit 28d4e08</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.24-2.dev.git28d4e08" date="1507809600">- Update container/storage.conf and containers-storage.conf man page
- Default override to true so it is consistent with RHEL.</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.24-3.dev.git28d4e08" date="1508414400">- add rhel subscription secrets date to skopeo-containers
- skopeo-containers conflicts with docker &gt;= 2:1.13.1-61</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.24-5.gitdd2c3e3" date="1508760000">- built commit dd2c3e3a8e33b849f3625f4f56fa229c76448629</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 1:0.1.24-8.git28d4e08a" date="1510056000">- Add /usr/share/containers/mounts.conf</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 0.1.25-1.git7fd6f66b" date="1510142400">-   Fix CVE in tar-split
-   copy: add shared blob directory support for OCI sources/destinations
-   Aligning Docker version between containers/image and skopeo
-   Update image-tools, and remove the duplicate Sirupsen/logrus vendor
-   makefile: use -buildmode=pie</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 0.1.25-2.git7fd6f66b" date="1510142401">- Force storage.conf to default to overlay</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 0.1.25-2.git2e8377a7" date="1510747200">-  Add manifest type conversion to skopeo copy
-  User can select from 3 manifest types: oci, v2s1, or v2s2
-   e.g skopeo copy --format v2s1 --compress-blobs docker-archive:alp.tar dir:my-directory</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.26-2.dev.git2e8377a" date="1510833600">- bump changelog</changelog>
</package>
<package pkgid="6ad76173b9acce175efb71c646fe1e0d5195f7d1d73181de326f574d613d6060" name="skopeo" arch="x86_64">
  <version epoch="1" ver="0.1.28" rel="1.git0270e56.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.24-2.dev.git28d4e08" date="1507809600">- Update container/storage.conf and containers-storage.conf man page
- Default override to true so it is consistent with RHEL.</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.24-3.dev.git28d4e08" date="1508414400">- add rhel subscription secrets date to skopeo-containers
- skopeo-containers conflicts with docker &gt;= 2:1.13.1-61</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.24-5.gitdd2c3e3" date="1508760000">- built commit dd2c3e3a8e33b849f3625f4f56fa229c76448629</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 1:0.1.24-8.git28d4e08a" date="1510056000">- Add /usr/share/containers/mounts.conf</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 0.1.25-1.git7fd6f66b" date="1510142400">-   Fix CVE in tar-split
-   copy: add shared blob directory support for OCI sources/destinations
-   Aligning Docker version between containers/image and skopeo
-   Update image-tools, and remove the duplicate Sirupsen/logrus vendor
-   makefile: use -buildmode=pie</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 0.1.25-2.git7fd6f66b" date="1510142401">- Force storage.conf to default to overlay</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 0.1.25-2.git2e8377a7" date="1510747200">-  Add manifest type conversion to skopeo copy
-  User can select from 3 manifest types: oci, v2s1, or v2s2
-   e.g skopeo copy --format v2s1 --compress-blobs docker-archive:alp.tar dir:my-directory</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.26-2.dev.git2e8377a" date="1510833600">- bump changelog</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.27-3.dev.git14245f2" date="1512993600">- rebased to 0.1.27-3.dev.git14245f2</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.28-1.git0270e56" date="1517486400">- rebased to 0.1.28</changelog>
</package>
<package pkgid="caad2eaf2d8764e20973af720554c8a140c0c71583046f620f61ba9c434a1c3c" name="skopeo-containers" arch="x86_64">
  <version epoch="1" ver="0.1.24" rel="1.dev.git28d4e08.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.17-0.7.git1f655f3" date="1479816000">- runtime dep was missing epoch value, added now</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.17-1" date="1481630400">- Resolves: #1404274 - ship upstream v0.1.17 release
- built commit b3b4e2b</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.18-1" date="1486123200">- btrfs-progs-devel, device-mapper-devel added to build dependencies
- built commit b08008c</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.18-1.1" date="1490616000">- rebuilt for all arches on extras 7.4
- enable debuginfo package</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.18-1.2" date="1490875200">- build for all available arches (previous build didn't do this)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.19-1.1.git62e3747" date="1490875201">- bump to v0.1.19
- built commit 62e3747</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.20-1.1.gite802625" date="1496750400">- built commit e802625b7cb7f4af9ab77bd2be9eb441ff2f28a2</changelog>
  <changelog author="Ryan Hartman &lt;rhartman@redhat.com&gt; - 1:0.1.20-2.1.gite802625" date="1498824000">- bump release to 2.1
- built commit e802625b7cb7f4af9ab77bd2be9eb441ff2f28a2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.23-1.git1bbd87f" date="1502107200">- Resolves: #1455575, #1478416, #1387217
- bump to v0.1.23</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.24-1.dev.git28d4e08" date="1507291200">- Resolves: #1499274
- built commit 28d4e08</changelog>
</package>
<package pkgid="e2d396849bd862f0833b1971ca060baf9402a6de7c240ef02603cf4dc470d753" name="skopeo-containers" arch="x86_64">
  <version epoch="1" ver="0.1.26" rel="2.dev.git2e8377a.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.23-1.git1bbd87f" date="1502107200">- Resolves: #1455575, #1478416, #1387217
- bump to v0.1.23</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.24-1.dev.git28d4e08" date="1507291200">- Resolves: #1499274
- built commit 28d4e08</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.24-2.dev.git28d4e08" date="1507809600">- Update container/storage.conf and containers-storage.conf man page
- Default override to true so it is consistent with RHEL.</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.24-3.dev.git28d4e08" date="1508414400">- add rhel subscription secrets date to skopeo-containers
- skopeo-containers conflicts with docker &gt;= 2:1.13.1-61</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.24-5.gitdd2c3e3" date="1508760000">- built commit dd2c3e3a8e33b849f3625f4f56fa229c76448629</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 1:0.1.24-8.git28d4e08a" date="1510056000">- Add /usr/share/containers/mounts.conf</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 0.1.25-1.git7fd6f66b" date="1510142400">-   Fix CVE in tar-split
-   copy: add shared blob directory support for OCI sources/destinations
-   Aligning Docker version between containers/image and skopeo
-   Update image-tools, and remove the duplicate Sirupsen/logrus vendor
-   makefile: use -buildmode=pie</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 0.1.25-2.git7fd6f66b" date="1510142401">- Force storage.conf to default to overlay</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 0.1.25-2.git2e8377a7" date="1510747200">-  Add manifest type conversion to skopeo copy
-  User can select from 3 manifest types: oci, v2s1, or v2s2
-   e.g skopeo copy --format v2s1 --compress-blobs docker-archive:alp.tar dir:my-directory</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.26-2.dev.git2e8377a" date="1510833600">- bump changelog</changelog>
</package>
<package pkgid="128c4ccb21627129ad2cbf7bc74e2066a7cb4d1581d7e884eff9c6c0beb2f823" name="skopeo-containers" arch="x86_64">
  <version epoch="1" ver="0.1.28" rel="1.git0270e56.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.24-2.dev.git28d4e08" date="1507809600">- Update container/storage.conf and containers-storage.conf man page
- Default override to true so it is consistent with RHEL.</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.24-3.dev.git28d4e08" date="1508414400">- add rhel subscription secrets date to skopeo-containers
- skopeo-containers conflicts with docker &gt;= 2:1.13.1-61</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.24-5.gitdd2c3e3" date="1508760000">- built commit dd2c3e3a8e33b849f3625f4f56fa229c76448629</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 1:0.1.24-8.git28d4e08a" date="1510056000">- Add /usr/share/containers/mounts.conf</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 0.1.25-1.git7fd6f66b" date="1510142400">-   Fix CVE in tar-split
-   copy: add shared blob directory support for OCI sources/destinations
-   Aligning Docker version between containers/image and skopeo
-   Update image-tools, and remove the duplicate Sirupsen/logrus vendor
-   makefile: use -buildmode=pie</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 0.1.25-2.git7fd6f66b" date="1510142401">- Force storage.conf to default to overlay</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 0.1.25-2.git2e8377a7" date="1510747200">-  Add manifest type conversion to skopeo copy
-  User can select from 3 manifest types: oci, v2s1, or v2s2
-   e.g skopeo copy --format v2s1 --compress-blobs docker-archive:alp.tar dir:my-directory</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.26-2.dev.git2e8377a" date="1510833600">- bump changelog</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.27-3.dev.git14245f2" date="1512993600">- rebased to 0.1.27-3.dev.git14245f2</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.28-1.git0270e56" date="1517486400">- rebased to 0.1.28</changelog>
</package>
<package pkgid="bada704bdf26defb4a52c8c42ed42ffb9b2e2a509ace9466764eb89f46aee0e2" name="slf4j" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="4.el7_4"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-5" date="1354276800">- Build with xmvn</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-6" date="1357646400">- Rebuild to generate maven provides</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-7" date="1357732800">- Fix install location of manual</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.7.2-8" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.7.2-9" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.3-1" date="1363348800">- Update to upstream version 1.7.3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-1" date="1363780800">- Update to upstream version 1.7.4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-2" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.7.4-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 0:1.7.4-4" date="1521547200">- Disallow EventData deserialization by default (CVE-2018-8088)</changelog>
</package>
<package pkgid="1b0bde9cfb02616e01b88caae1e5beb9f35a210e8d7765542dca1a572dd91d8d" name="slf4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="4.el7_4"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-5" date="1354276800">- Build with xmvn</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-6" date="1357646400">- Rebuild to generate maven provides</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-7" date="1357732800">- Fix install location of manual</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.7.2-8" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.7.2-9" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.3-1" date="1363348800">- Update to upstream version 1.7.3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-1" date="1363780800">- Update to upstream version 1.7.4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-2" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.7.4-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 0:1.7.4-4" date="1521547200">- Disallow EventData deserialization by default (CVE-2018-8088)</changelog>
</package>
<package pkgid="605cd3004779f29bfb5909fc7944315b35e6b17cfd7947a834f6b3b0a9e6d093" name="slf4j-manual" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="4.el7_4"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-5" date="1354276800">- Build with xmvn</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-6" date="1357646400">- Rebuild to generate maven provides</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-7" date="1357732800">- Fix install location of manual</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.7.2-8" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.7.2-9" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.3-1" date="1363348800">- Update to upstream version 1.7.3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-1" date="1363780800">- Update to upstream version 1.7.4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-2" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.7.4-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 0:1.7.4-4" date="1521547200">- Disallow EventData deserialization by default (CVE-2018-8088)</changelog>
</package>
<package pkgid="29229bdfac2ce982a256ea02e79cef9035117f80fedbfb913aa3b6d1f6296985" name="sos" arch="noarch">
  <version epoch="0" ver="3.4" rel="13.el7_4"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-4" date="1495454400">- [libvirt] fix per-process cgroup collection
  Resolves: bz1148381
- [ceph] exclude temporary mount locations from collection
  Resolves: bz1449904
- [policies/redhat] make missing 'filesystem' package non-fatal
  Resolves: bz1393961</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-5" date="1496145600">- [samba] Fix dc-connect winbind logfile path
  Resolves: bz1400407</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-6" date="1499860800">- [tripleo] Add ui logs
  Resolves: bz1470573</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-7" date="1507636800">- [openstack plugins] Tripleo specific containerized services
  Resolves: bz1463635
- [jars] Scan only /usr/{share,lib}/java by default
  Resolves: bz1482574
- [gluster_block] Added new plugin gluster_block
  Resolves: bz1491964</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-8" date="1507809600">- [gnocchi] Tripleo specific containerized services logs
  Resolves: bz1463635</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-9" date="1510747200">- [openstack_*] further updates to OSP plugins in containers
  Resolves: bz1511087</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-10" date="1511179200">- [postgresql] Collect data for postgreSQL from RHSCL
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-11" date="1512734400">- [postgresql] Call SCL pg_dump with proper path
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-12" date="1515067200">- [openstack_cinder] check for api service running
  Resolves: bz1511087
- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-13" date="1515067201">- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1515113</changelog>
</package>
<package pkgid="8ebf2fd0fd8c736ceaa8f9f81cc09debc9c2052d12b0d47d6c4e74c14c317cfa" name="spice-glib" arch="i686">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="872e2992ff6547ebb445174e75e7a523efa29f881464c01a7815bce1e152628f" name="spice-glib" arch="x86_64">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="c5c33c26112877b8247a21537c43d648ab8a4596dea63d104e7a8d8cf5b5ba2b" name="spice-glib-devel" arch="i686">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="3a87f9fd8a0f395bbc053427fbbc7f3a2769ce1cb0a4dabbf134eea01f186d8f" name="spice-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="ef78de46a718e01cf4ac81a3baf065e7c7455d2a3a999592cb088e95fea88f2a" name="spice-gtk-tools" arch="x86_64">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="f808c3d06e51704c88b43b09d7a8b21a82872604dd57b3c53b5bc46395f7f04c" name="spice-gtk3" arch="i686">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="b1f2b2bcde135babe0339054d3cda4dda5df989983f8cc17e50e79bc690dcdca" name="spice-gtk3" arch="x86_64">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="060503b228d4de7ffe1770948ebd2879c5d170cc0df3af3a6f26fa37f6e0b9ed" name="spice-gtk3-devel" arch="i686">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="2a4d97e4182a2b28a19147a5023971e3bc31580418b363b69432d3c4de050395" name="spice-gtk3-devel" arch="x86_64">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="d93b63973376a70fbdb61c502765ceddff7a4d33fe5117007a800dad3dc284d3" name="spice-gtk3-vala" arch="x86_64">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="300a41ad0bb4a1df69e55c9feb521edbd14b1bfa8a4efc8b0dce3b808c65528d" name="spice-server" arch="x86_64">
  <version epoch="0" ver="0.12.8" rel="2.el7.1"/>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; 0.12.4-15" date="1443009600">- CVE-2015-5260 CVE-2015-5261 fixed various security flaws
  Resolves: rhbz#1267134</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-16" date="1461585600">- Use autosetup
  Related: CVE-2016-0749
- Fix heap-based memory corruption within smartcard handling
  Resolves: CVE-2016-0749
- Fix host memory access from guest with invalid primary surface parameters
  Resolves: CVE-2016-2150</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-17" date="1461758400">- Fix crash when the client sends a wrong header (for example when using spice-html5)
  Resolves: rhbz#1281442
- Fix crash when guest provides wrong address
  Resolves: rhbz#1264356
- Fix thread-safety issue causing a crash when playing a Youtube video spanning
  multiple monitors
  Resolves: rhbz#1253375
- Add patches reducing QEMU wake-ups
  Related: rhbz#912763, rhbz#1186146
- Fix use-after-free after resetting a VM
  Resolves: rhbz#1281455
- Send KeepAlive probes every 10 minutes
  Resolves: rhbz#1298590
- Add client to guest volume synchronization
  Resolves: rhbz#1264107</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-18" date="1467374400">- Fix crash when connecting to VM using smartcard passthrough
  Resolves: rhbz#1340899
- Fix hang after unredirecting a USB device
  Resolves: rhbz#1338752
- Backport spice_qxl_set_max_monitors()
  Resolves: rhbz#1283202</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.4-19" date="1473422400">- Ensure SPICE_MIGRATE_COMPLETED is sent in all cases when it's needed.
  Resolves: rhbz#1352836</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.12.4-20" date="1481284800">- Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
  messages.
  Resolves: CVE-2016-9577
- Fix remote DoS via crafted message.
  Resolves: CVE-2016-9578</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-1" date="1484568000">- Rebase to spice-server 0.12.8
  Resolves: rhbz#1388947
  Resolves: rhbz#1377551
  Resolves: rhbz#1283202</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-2" date="1493121600">- Drop clients immediatly if the magic they send is wrong
  Resolves: rhbz#1416692</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-3" date="1498824000">- Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
  sent from an authenticated client
  Resolves: CVE-2017-7506</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-2.1" date="1499256000">- Redo build properly versioned as a zstream build
  Related: CVE-2017-7506</changelog>
</package>
<package pkgid="0bebb3609679241fcc741bab01b8f8bd8fa4dde1851d992dae4a4f49228ff64d" name="spice-server-devel" arch="x86_64">
  <version epoch="0" ver="0.12.8" rel="2.el7.1"/>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; 0.12.4-15" date="1443009600">- CVE-2015-5260 CVE-2015-5261 fixed various security flaws
  Resolves: rhbz#1267134</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-16" date="1461585600">- Use autosetup
  Related: CVE-2016-0749
- Fix heap-based memory corruption within smartcard handling
  Resolves: CVE-2016-0749
- Fix host memory access from guest with invalid primary surface parameters
  Resolves: CVE-2016-2150</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-17" date="1461758400">- Fix crash when the client sends a wrong header (for example when using spice-html5)
  Resolves: rhbz#1281442
- Fix crash when guest provides wrong address
  Resolves: rhbz#1264356
- Fix thread-safety issue causing a crash when playing a Youtube video spanning
  multiple monitors
  Resolves: rhbz#1253375
- Add patches reducing QEMU wake-ups
  Related: rhbz#912763, rhbz#1186146
- Fix use-after-free after resetting a VM
  Resolves: rhbz#1281455
- Send KeepAlive probes every 10 minutes
  Resolves: rhbz#1298590
- Add client to guest volume synchronization
  Resolves: rhbz#1264107</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-18" date="1467374400">- Fix crash when connecting to VM using smartcard passthrough
  Resolves: rhbz#1340899
- Fix hang after unredirecting a USB device
  Resolves: rhbz#1338752
- Backport spice_qxl_set_max_monitors()
  Resolves: rhbz#1283202</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.4-19" date="1473422400">- Ensure SPICE_MIGRATE_COMPLETED is sent in all cases when it's needed.
  Resolves: rhbz#1352836</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.12.4-20" date="1481284800">- Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
  messages.
  Resolves: CVE-2016-9577
- Fix remote DoS via crafted message.
  Resolves: CVE-2016-9578</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-1" date="1484568000">- Rebase to spice-server 0.12.8
  Resolves: rhbz#1388947
  Resolves: rhbz#1377551
  Resolves: rhbz#1283202</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-2" date="1493121600">- Drop clients immediatly if the magic they send is wrong
  Resolves: rhbz#1416692</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-3" date="1498824000">- Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
  sent from an authenticated client
  Resolves: CVE-2017-7506</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-2.1" date="1499256000">- Redo build properly versioned as a zstream build
  Related: CVE-2017-7506</changelog>
</package>
<package pkgid="d2fb40fc03d30ce135e52c319c354fa009a280d52907a55db82bac7e90e1603a" name="sssd" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="fe2470f465e6f6303f8d74686fe1bd385a91d02f70f7f21cf2eb44f75130f931" name="sssd" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="8d20ff5a47fda50d41d0c42b75e98eab4f8b48348404c1dcd8c8d56eec80b4b0" name="sssd" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="ac4b2468cd7d68acb176e57da07b2dbd6e9d5dd7ba213165ea7bb37baef41fec" name="sssd" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="bbdf7e6c35a5fafea73b7f901d0e93fd74d1598ae440ae530b49cf1b893be92b" name="sssd-ad" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="ac0b7127cf2b9756524ac0530abcb1bfa3cc9dbee722ff0c71315f4732500726" name="sssd-ad" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="52eb03fabd7ca457d6e0bcf17d865070bfe8aedb58cb8e3b904dceb59a3a6710" name="sssd-ad" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="d66abaab3b6d4883a6f93eba65cc9751b18f093d797d4c9ee61223c48b29584a" name="sssd-ad" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="0e295eaf3517ce8939a962f94d0f63ac801fce6dd7168f691838e1552cb0a378" name="sssd-client" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="45daa220fa573f183ba4c0cf89b063be50e7736ce3228f7fa4149bdc43d7d1f2" name="sssd-client" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="a934cf2729b73afd4f68a435626df1b701d8339dcc3dc5d811b8c635c8b9c3dd" name="sssd-client" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="e366cbd77f247f11977df0c0717e5c64559f518532ce33cf391e4cdd6af339ed" name="sssd-client" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="999f496800dbc616a09444ffd11dc380973668f10faad9fa4dfe22b182ea4537" name="sssd-client" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="321444d63730f59133c1570f15b795fb5d5403f6693486560f41b50054c2f661" name="sssd-client" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="45d7f16df06ba1a13980cabd1d4a28ef55f6b7b44ddb16f55d7f1be969f8eacb" name="sssd-client" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="de978cb464095c16d8577fe1cf87d0fbdce58cbe41ce94a3e030aab5a18e3a62" name="sssd-client" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="f37e6acea205a29911c07de8bd4ccc416452eb536501a25326fc14264655ab4f" name="sssd-common" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="48e72dac98ecc3afd1f35842b27664e0265dbf1e3b3f98336df91c149747c785" name="sssd-common" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="a3ac7bafbbfd7743af88dcbf6aa4c5401d8d5d520bed85f6ab7fc4a98dd6ea19" name="sssd-common" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="d5799e1b8cb503b315307622b7e793871fdaf73c3523cf6afbf33f63d25a1cca" name="sssd-common" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="875278b61bb6bd6c33d03024d2d9143139885048d071a1577a9a0e90176e8314" name="sssd-common-pac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="571cfb549ccc9132c006693b0677470deee837da01dcba70d87d0ded06abc4ce" name="sssd-common-pac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="a456e1932c50e470609d860b921423bd2a7d0b942fcb3c3144ee375b0b9d21dc" name="sssd-common-pac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="49c59af4cc421d33aaa86fec9b10c13284735130f5915cf29a23fe3b4165157d" name="sssd-common-pac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="a8f78a2d58046c559fa5c8e7549f222ecaf1ab1fe7c25447f305317ebae08f51" name="sssd-dbus" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="927fda51f338957a9ac006cf3a691ccb33172d879779e838219447d3c4e50469" name="sssd-dbus" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="fb7cc4e96ad7e4680ab2abadf0327271b1253f625e174bb1435d6d1f8e20434e" name="sssd-dbus" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="6e6c1490cbdfdba95882a46ead7b65d99a7259bda5493500b2b55fddf9c670bf" name="sssd-dbus" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="e729bf2c88f13ffa7184aeccd100f59678846ab865bfa9838af34ff69a6f4788" name="sssd-ipa" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="1b57ec6e30fc8b0cfba093c2bfecc836791d24687135a256222bdd59f16a5dcb" name="sssd-ipa" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="0431b0758c5dbdead1af5052728f365cbd5eb90b52139ebf06ad52cee7e33547" name="sssd-ipa" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="aa569731668e4742123e406067714ef16ab9c35955f0fc3ded308f5179733a3e" name="sssd-ipa" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="731a81d67c97f15fa34b0538559cd5179d069549d805bf41e54fc15547272386" name="sssd-kcm" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="414f882b8ca7b8c5d376eeb4d37dc65d819548f92d263af1ed55d379bf139c7c" name="sssd-kcm" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="09acff4ebd426f65c2e725d2acafd6996dda7075211a9d1d3dccae6fd312207f" name="sssd-kcm" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="2c623b10dd40a07e831fbe96fac5e107a326b33cfe97b29a3e980f4941bc735d" name="sssd-kcm" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="f247e56d6a83d1cda462a92c9e5514194147546382e015e7de4110bf6cc1b25a" name="sssd-krb5" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="ffd61968b6bd1da7e8b408fc0a41a2ed94dce3ecd5a32e12ce4dca58e203f92e" name="sssd-krb5" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="de5d8fbead90fc54fc1a04ebe3df57cd352492e0980ae648af974755f289d0ec" name="sssd-krb5" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="c0b548feaa7ae9a87891ac0cde5c4ed995bf4fc334e1c5d237d73984d3bb6ac3" name="sssd-krb5" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="fc1311589edd8fd5c9a71e2be80f373d9f40fcc214564d367309496708d80f09" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="b32458c5f1fb1ab9c6d465f6dea35cb36260e4817d191ef56e8fcc4301f44742" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="81802249c5dfa28e8cd2922311ce00fac60116d1687d4f095ea334e3a259de8b" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="ad52d04e99aac444c0b61fc0f88a13ce51322e4936f5d6a8be5c8b311555b8d8" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="eed3f1fff5bae0f85037388b3f7d6e610b8eb1bae6eb9218a1fab5c30943e2ef" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="20a0423f2a20a430d910a530c1287dbe9bc44ec6351fbdb7e92dd7ee6a4f544b" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="05ee2f1ec7577d434b0e4a2cfb752025f28142e53faecf3601f4b30cc37bacec" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="c9faf0d2ed46b1f8e2dcc74e73d97121fa04363abe5917182558d65be4424bd0" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="93b993ba98b771cb6189f06fbde124c2db22f90b551d0aa9be25f1acd58ffc65" name="sssd-libwbclient" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="deb68fb5e873791e86d861437277c03764549bbf19580a46786716d529b6e20a" name="sssd-libwbclient" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="99acebbcc935b08b6ea4b4c85886a8babb2544c87eccab794a94600a24c5975a" name="sssd-libwbclient" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="77a113dec4f99a4f5c10c256d3434d98d953cf1f443d311a69a04439b8150951" name="sssd-libwbclient" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="281a1f010834c6fc86cc5689b4ff448dfebc40b8883a04b72c930d26d05da5c5" name="sssd-libwbclient-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="6b0b0d7a441018bc09b439c3b732cf4ba94cf1ff8a2c406e4f78892a96ff06cd" name="sssd-libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="6f62798700789420b5697e81990fa19b4b1850c9df0ca9450038576adfa6bb8c" name="sssd-libwbclient-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="fb0f8cc2decfa7e38ef6b22bc9991eeae282fc9fd2fcba9485794a868ec65a57" name="sssd-libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="eec03bc7a00591ce3536ba8759fb6ab85ba3a67fa2b9fb49de895a720142f6cf" name="sssd-libwbclient-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="10285dd402c1cf7823147a3c21b4d0f4280d7cc7170eca3a609b53c4dd6758fe" name="sssd-libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="821696cd6897a38e531c6cce16b40318fc5faa1212e694c283627039902735da" name="sssd-libwbclient-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="a3b582b05b32a9460c38dd02015cc913358ec918ef9e20ebcfb510b3deb4244b" name="sssd-libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="310e4c20e79744f17e5b7711b8106fab25fc4a551f8ae2c2da96c9e45dd2d93a" name="sssd-polkit-rules" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="df5f83a4b99947abc61b4016bed21657611568b2dbad0237d2af00912335beee" name="sssd-polkit-rules" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="5c8ca0769d62f3213185f9c2de6b783f079f3990e4215f7e9d349dba68a5d0e1" name="sssd-polkit-rules" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="944ee14f547569e4ad8a20df5cfc7ff829324ba64775264d40ce3caf8c22931d" name="sssd-polkit-rules" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="436289704a1d51657f56e3280f1c36d8af64be19b9e966848d745e8f886e3a94" name="sssd-proxy" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="1c1cce7fa8cb8c887383c7364151ce8d592bdda939a42789317aa8829afced74" name="sssd-proxy" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="4cc4b6bb8419aa799fb7eedfe506950fcf0192095d006008a32b59e052f23c9f" name="sssd-proxy" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="9bf851715033a31c10358a00c850cdf6ea04e0cba15652323fb2f604477c52c6" name="sssd-proxy" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="ba305dec044597e71f6ab2ca769f822a2e87d0386e19a66e911d97a463519db7" name="sssd-tools" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="f02a3bba47152d1ea681f8c1026b513c68a9c9fad48c5d865b367545d0b1d032" name="sssd-tools" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="8f1d9277d9323ca1632735ab3bdc2969a7d75dbfaacda6d8e2de469e949da7c5" name="sssd-tools" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="6e69db595bca4a5e0984aa0d38d98997cce15c2b9add3f6ffe0cb19d9980a193" name="sssd-tools" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="8e734e87fa6cc6c47a556854ae382b0045118e4713ca77ded0ede1de1bee87e1" name="sssd-winbind-idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="2537e2b906d21094d3908d365da6c4342446bf9f423ef22f521943c079043625" name="sssd-winbind-idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="b0ce3226e2f0c930a90d7b706bd1329aa095e7859691f13d26ca9ff3a31c5900" name="sssd-winbind-idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="2385aa3696cb1e3bd57f4f1371b5ab0ad6bd63e1bd190ec6a8720e8ce9abf94b" name="sssd-winbind-idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="ed243edfad3a80a1dea6dd93625346a49f7bb79795bd638ad6fa2739c6d1bb62" name="storaged" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="4.el7"/>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.1.0-3" date="1435147200">- Changes for EPEL-7
  - Lower systemd required version to 208
  - Rewrite BuildRequires for systemd-devel</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.1.0-4" date="1435147201">- Add Requires for storaged modules</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.1.1-1" date="1436184000">- Upgrade to 2.1.1
- Related: rhbz#1227797</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.2.0-1" date="1440504000">- Upgrade to 2.2.0
- Related: rhbz#1227797</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.2.0-3" date="1440676800">- Rebuild to fix upgrade path</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.2.0-4" date="1460116800">- Fix segfault when no configuration is given for a LUKS device
- Resolves: rhbz#1324209</changelog>
  <changelog author="Tomas Smetana &lt;tsmetana@redhat.com&gt; - 2.5.2-1" date="1465387200">- Upgrade to 2.5.2
- Resolves: rhbz#1340359</changelog>
  <changelog author="Tomas Smetana &lt;tsmetana@redhat.com&gt; - 2.5.2-2" date="1468238400">- Enable iSCSI support only when the necessary API is available
- Resolves: rhbz#1352454</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 2.5.2-3" date="1492084800">- Bump and rebuild for all architectures</changelog>
  <changelog author="Vratislav Podzimek &lt;vpodzime@redhat.com&gt; - 2.5.2-4" date="1498564800">- Fix seg fault in udiskslvmhelper
  Resolves: rhbz#1436914
- lvm2daemonutil.c: Close FD for spawned process
  Resolves: rhbz#1463843</changelog>
</package>
<package pkgid="dc25dcb59216fb066174b9caa0318846c21a865ba43768af9e3b60c23725e0a1" name="storaged-iscsi" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="4.el7"/>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.1.0-3" date="1435147200">- Changes for EPEL-7
  - Lower systemd required version to 208
  - Rewrite BuildRequires for systemd-devel</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.1.0-4" date="1435147201">- Add Requires for storaged modules</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.1.1-1" date="1436184000">- Upgrade to 2.1.1
- Related: rhbz#1227797</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.2.0-1" date="1440504000">- Upgrade to 2.2.0
- Related: rhbz#1227797</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.2.0-3" date="1440676800">- Rebuild to fix upgrade path</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.2.0-4" date="1460116800">- Fix segfault when no configuration is given for a LUKS device
- Resolves: rhbz#1324209</changelog>
  <changelog author="Tomas Smetana &lt;tsmetana@redhat.com&gt; - 2.5.2-1" date="1465387200">- Upgrade to 2.5.2
- Resolves: rhbz#1340359</changelog>
  <changelog author="Tomas Smetana &lt;tsmetana@redhat.com&gt; - 2.5.2-2" date="1468238400">- Enable iSCSI support only when the necessary API is available
- Resolves: rhbz#1352454</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 2.5.2-3" date="1492084800">- Bump and rebuild for all architectures</changelog>
  <changelog author="Vratislav Podzimek &lt;vpodzime@redhat.com&gt; - 2.5.2-4" date="1498564800">- Fix seg fault in udiskslvmhelper
  Resolves: rhbz#1436914
- lvm2daemonutil.c: Close FD for spawned process
  Resolves: rhbz#1463843</changelog>
</package>
<package pkgid="e5034d5ae3431541ae7f40abf638a1bc4bfc7a7d430e5c1f45170436a427c28d" name="storaged-lvm2" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="4.el7"/>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.1.0-3" date="1435147200">- Changes for EPEL-7
  - Lower systemd required version to 208
  - Rewrite BuildRequires for systemd-devel</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.1.0-4" date="1435147201">- Add Requires for storaged modules</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.1.1-1" date="1436184000">- Upgrade to 2.1.1
- Related: rhbz#1227797</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.2.0-1" date="1440504000">- Upgrade to 2.2.0
- Related: rhbz#1227797</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.2.0-3" date="1440676800">- Rebuild to fix upgrade path</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.2.0-4" date="1460116800">- Fix segfault when no configuration is given for a LUKS device
- Resolves: rhbz#1324209</changelog>
  <changelog author="Tomas Smetana &lt;tsmetana@redhat.com&gt; - 2.5.2-1" date="1465387200">- Upgrade to 2.5.2
- Resolves: rhbz#1340359</changelog>
  <changelog author="Tomas Smetana &lt;tsmetana@redhat.com&gt; - 2.5.2-2" date="1468238400">- Enable iSCSI support only when the necessary API is available
- Resolves: rhbz#1352454</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 2.5.2-3" date="1492084800">- Bump and rebuild for all architectures</changelog>
  <changelog author="Vratislav Podzimek &lt;vpodzime@redhat.com&gt; - 2.5.2-4" date="1498564800">- Fix seg fault in udiskslvmhelper
  Resolves: rhbz#1436914
- lvm2daemonutil.c: Close FD for spawned process
  Resolves: rhbz#1463843</changelog>
</package>
<package pkgid="7de58c2141f419bd924d43bc147f90baff4bb093c6b582ababb90d9486d1fc12" name="subversion" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="b94dfafe5dfa11224f0a40e68e3728d97531cc3d9f1c7981ed041a464b59c82c" name="subversion" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="c56dfbe5b4eba0f3fde433325983fe3e236481d5c80055effd4b46ee9da1eb68" name="subversion-devel" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="f224b928970a618e975b9c0cb8115c60c67a60028a4a07335fe13ff470400d0f" name="subversion-devel" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="7c976a579da13307ba57b846f142e230077a9f3b2336a05e2a8922be62f257ab" name="subversion-gnome" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="fc086453f8e320b2fe05e1e1542b4887365e0ecce44fd316b234de0dd0991b8d" name="subversion-gnome" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="9514fd533273fefd83fd9e33373b3cd0f04de9e6ef31987065233eadd2ecfe49" name="subversion-javahl" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="30765fa78ff348d6f606014f23fa533d75d5f744b7e334dc24b77e1d071bb482" name="subversion-javahl" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="f6b857d22dc0ec84b3070b4f41088761e95b5d764dcda4549548c2e5e083c97b" name="subversion-kde" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="ec2d3fd59039a55cfadbed0055e40022989ae25081d3d405d76c21556d66ae9d" name="subversion-kde" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="f59fc209876fa8b62efc7619b5b00a85b5b2af2ad49b5820074cbaf653e2f9fe" name="subversion-libs" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="1019711bf36365c484ee55b5607db779db29fcca6353cc9d0ff368a7fcf82864" name="subversion-libs" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="182eff0b2993cf4b8080c762cd4a8eeb0317bd7ceada10c9521304bc0afc757b" name="subversion-perl" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="14e6f6e4f8694fb80a66ca4d7f75d32ff9e202c2f5c7a1508550e369f4066d2d" name="subversion-perl" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="52a3ce3f204ad54718137b171c5f9820efee928f06dc9cb0993066b88b24b9d1" name="subversion-python" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="4a97f1985338a32e2d494427f109f6497d9cf786ac1cb1090689763a5d5b07f2" name="subversion-ruby" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="aab9a1473be5c275255a9d18f153e0abc97361d91e2126e4c0017e5b207057fe" name="subversion-ruby" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="031d85fc4eb1de271445c1ba3dccaad9c04d5214442fc051e3b562f191b96765" name="subversion-tools" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="5db70d51707c6f50fb5e81d33fcb6bad2ca877978a5b7f95fb0d8c0780ab6c39" name="sudo" arch="x86_64">
  <version epoch="0" ver="1.8.19p2" rel="11.el7_4"/>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-2" date="1488974400">- RHEL 7.4 erratum
- Fixes coverity scan issues created by our patches: 
  - fixed resource leaks and a compiler warning in digest backport patch
  - removed needless code from cmnd_no_wait patch causing clang warning
  - format of the last changelog message causes problems to rhpkg push,
    so don't use that as a commit message 
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-3" date="1488974401">- RHEL 7.4 eratum
- Fixes semicolon typo in digest backport patch from the previous build
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-4" date="1490097600">- RHEL 7.4 erratum
- fixed cmnd_no_wait patch
- backported iolog_flush sudoers default
  Resolves: rhbz#1369856
  Resolves: rhbz#1425853</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1503057600">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1482929</changelog>
</package>
<package pkgid="b933559014e31fa8bd7d8424d518d1685fb73731adff446178b4ea8546f93bf5" name="sudo-devel" arch="i686">
  <version epoch="0" ver="1.8.19p2" rel="11.el7_4"/>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-2" date="1488974400">- RHEL 7.4 erratum
- Fixes coverity scan issues created by our patches: 
  - fixed resource leaks and a compiler warning in digest backport patch
  - removed needless code from cmnd_no_wait patch causing clang warning
  - format of the last changelog message causes problems to rhpkg push,
    so don't use that as a commit message 
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-3" date="1488974401">- RHEL 7.4 eratum
- Fixes semicolon typo in digest backport patch from the previous build
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-4" date="1490097600">- RHEL 7.4 erratum
- fixed cmnd_no_wait patch
- backported iolog_flush sudoers default
  Resolves: rhbz#1369856
  Resolves: rhbz#1425853</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1503057600">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1482929</changelog>
</package>
<package pkgid="3744d0a7ece2c0faa0f54251432311d1a94d6c1bcbf811faa79173fc3d41e14d" name="sudo-devel" arch="x86_64">
  <version epoch="0" ver="1.8.19p2" rel="11.el7_4"/>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-2" date="1488974400">- RHEL 7.4 erratum
- Fixes coverity scan issues created by our patches: 
  - fixed resource leaks and a compiler warning in digest backport patch
  - removed needless code from cmnd_no_wait patch causing clang warning
  - format of the last changelog message causes problems to rhpkg push,
    so don't use that as a commit message 
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-3" date="1488974401">- RHEL 7.4 eratum
- Fixes semicolon typo in digest backport patch from the previous build
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-4" date="1490097600">- RHEL 7.4 erratum
- fixed cmnd_no_wait patch
- backported iolog_flush sudoers default
  Resolves: rhbz#1369856
  Resolves: rhbz#1425853</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1503057600">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1482929</changelog>
</package>
<package pkgid="9f5159233837f40d9dc4cb92ccdfd4d9a64d25454710f9e55be3368bbc6fc123" name="systemd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="6549948227e5375d7f559d8518775de11ef6623593abb2c7f80aadbaa1b7003a" name="systemd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="b9031fc456cc5ccd7c020e6316e02d24490c2fa84bdb9e64de2c483bec4e84a1" name="systemd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="91ccf4cf2b312216770cf9ec365ce699d76e096ac5b1aa5aeca315fb161105e1" name="systemd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="a7c79719276e5b60bd2e931497c44fa34e0101ae2d7dbda74ebf2a1991d270bb" name="systemd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="4d4d639b40ef326126efdd19a3d23573f2301efda9460da9b8091de8a615b4ae" name="systemd-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="7f3c6756fba9a03f725f22f38040baa02bc2291b1576a48e5f5e90a80fc6374e" name="systemd-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="a1880da0ae6d4b05f209e7df62f4877420bae826ceb5cf7ada031d11329d4f23" name="systemd-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="6725cdbb3630f6adc60121e4c4bc00023202b6cc5b623f69b8734ad2b607f048" name="systemd-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="351d4ca70967785113e0dc8e92a0a702efc221aad6ff729db6e7e77dc41e38a7" name="systemd-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="4f17d4476e9b8b867998a44aede12252a74ad65abbb64a627a82646a4bd99bfd" name="systemd-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="b1a318338a7dba88672e1b734a7cb222f287d7271754bfd89fa9146d393e4816" name="systemd-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="488aa3b0988cd37f306aaa4ade8d45ff3050337ebefaa2a16acd4aad14f745c2" name="systemd-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="8f5316c8414480c3b92d328220d7c5a4d0a3c031170c5cf0592f44752e738d92" name="systemd-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="34785d8c3518ab0b98bb123bdd21daa844d66f24c4dae93e4788e534cd78dc9d" name="systemd-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="c4b809847973f90b48f483e3d16a82af822c68ee876df0ee1a2f9fc9261ccac3" name="systemd-journal-gateway" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="59f28c5a6d47ca92579eb98ed9bd171a664a9323e3cb5559c3623ab0f5787c0b" name="systemd-journal-gateway" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="3ed001f1a4e35926883b72ee5552b062043106c3dda4c191b70b137755d4b346" name="systemd-journal-gateway" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="a27d5014818faea72e62d1c1911564a51dd28147b60c01339cdd01566b03fe46" name="systemd-journal-gateway" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="40a0fcb7d879a89576b47ea5e332d0e84620207c5a035ce0f52e0adeda62a0bc" name="systemd-journal-gateway" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="22a37c7887d3b412f2cc0b8cc1133ad4a8ce0e69547c507968bba21a37d90f0c" name="systemd-libs" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="cc479847777b3991eb12d29d166af8895e877b2b13dd2cf80a2517eca1145690" name="systemd-libs" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="426041e329d7297dce33b7fc1ae693d60a1dffacc68e06f7379fefe6226be01b" name="systemd-libs" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="314dc8458cbb051a5ab18b2e971d2f9f1217c5415bff7c24fd2921026d32a7fe" name="systemd-libs" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="03fb6699a6d468c44a819d84f92c633dbe5d732ad96b86991479c4aa8d69451c" name="systemd-libs" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="513f1341e011ab7ad02526a47d8166806e0bd6837f944f3721fed2193d4f5b7f" name="systemd-libs" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="03f5614bd8f7b0cbc23dad38c6fc86408d34ac0acb7c892be628d959af563030" name="systemd-libs" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="ca39df669c382d8f8e9b07624e9eb1f3da9228836b3883d9394598af526f7f80" name="systemd-libs" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="a81a881624ead1d01c93ddcab3ff188178bd32a53143b4f4780abd21c291b010" name="systemd-libs" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="6f605b80993d61a4bb761083d4a3444495483b4544c15a5c6d0ab0443836cf1c" name="systemd-libs" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="405c0825770452d363260a77d73b890e84db8763d1096fc79b627d14e2fe68a8" name="systemd-networkd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="0ab36a388ac2fb82f96f7daf49f66ef2d3ce86e7eda49b4e196416c04e30d746" name="systemd-networkd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="137889be30288e3b12a41d91ff20ad57f1ac7278306d1a05c9e499b7ec7feb7a" name="systemd-networkd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="50111e1139569f87d66513bce7dc8ecb514262d8f19b4e84aa920f111eda9b7d" name="systemd-networkd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="77abc977824eab373e94c8c9708199bacb0c2a181694fd17c4311604dee97217" name="systemd-networkd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="319196ae19e474c4a4e790d234a961a3df639fa6ac706ca82f6e146a64cd5dc0" name="systemd-python" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="cdb8895f1b24a4694d12c572660e56cc92d9a48fb9cd672af43f7af79607c80a" name="systemd-python" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="404e718f56df0fabfe262cbc188c34674d0ccfd8fbdbb38a1fc5496a562d6e1f" name="systemd-python" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="86efb37734c6bc762455e35f6a41cfdc508ae5d78d98512c1c4d1532b662ac93" name="systemd-python" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="76f43a88bb07a187fdcdf9a7492e2de0e3865b22b4772bfa273d0498f6e9c9b2" name="systemd-python" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="a8208eb7fce879072ad11c2bfa5fa5e42c4daa2bf2c3713e421a3545ecf9be23" name="systemd-resolved" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="7d468e11f02ff468e237cd5717310707d3c5bdd22683a58cba4d0bd7764febd0" name="systemd-resolved" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="229a3be5fa081831cb9f58fea01eaaf0187d34720823fbbc8d1939fb6f885f29" name="systemd-resolved" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="72d11fa1667af7c92c5ea84ebb95f7252aefabff25dec8d6f695180f33b75381" name="systemd-resolved" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="2914cede3762642d096c33ece7e3214634d134b06b9635707a1fbc6c41898428" name="systemd-resolved" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="eec494377add7b6f8858cedb765a15a2b8d96eac2aef6390207def9788e822eb" name="systemd-sysv" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="6fc543126b4a9669cd4e73d3d47863a932db7dbfa7af80587ce8c22d0a72a872" name="systemd-sysv" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="df38a58d1c28f6899f49ca1e3fc5f6227042bd1dd45b2d6502a91bc358ec5876" name="systemd-sysv" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="2f74812556788ca0846e0b8feeaf0e39013c20b3bd829c6dbf585a3ac3801d36" name="systemd-sysv" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="da84e5f39a584d9bbe0b9b35c0c668add272a3ab790686b170f0e69252643689" name="systemd-sysv" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="f64f09510567bffaa3fad90c7bcd396dfec202945c3bdf2c440fa3341e8013ca" name="systemtap" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="7bb18e99fa17f403cf60feea25039b06a93189a57e4114a7f156b89dff015d45" name="systemtap" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="71e072637da45622e747940d1e9138dddf1e280a37c806b06417122027ddac75" name="systemtap-client" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="932424e8eafa3649118128683a036f6cb2a7149719f55efa263cd4885d5e2e5e" name="systemtap-client" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="e14639d6e246fa1bf1cf976b00fb9e2e5df6175288268862fea92a1f1952ebbd" name="systemtap-devel" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="e63765087f07af2fc0711db9e35fa90e5191670dd1ae47476972ead882ddd13f" name="systemtap-devel" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="516a9bcfbed93af9a1eb8206a8d9d3c9e76efb54d3ccb1d97e3d1497ed877324" name="systemtap-initscript" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="177b44bfe9581bb95cad56873a5c5c3eb6b9561d903050c46e4fb133df241b5f" name="systemtap-initscript" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="e4252e7c798346f95f0a3aebcb6da83a0f1e030dbd84cc2e41aea8016c8e3d3e" name="systemtap-runtime" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="86fc9e12644254cca03209fe6e75842c9c891eb3138b1c4dfed06d7e8fa6ba13" name="systemtap-runtime" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="8551be63e1b87dc1a21a7b6915e5f83af3f3fe3c4438503de0cb8a9fdecec8dc" name="systemtap-runtime-java" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="2f1f059c6f790e71364756a14957f70b17fb303bc9f3b93500b3398c8d5919be" name="systemtap-runtime-java" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="cb0f31b12bfa2eb41e7e4a14685dd6fdee305fa204d37951850dcab7addafae9" name="systemtap-runtime-python2" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="0bd1debbcfad83cc738b22b44d6da6eb16d832dfb20ddd55d119dd5d08fba3a1" name="systemtap-runtime-python2" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="c7769c816573192ccdacd7851ebb68be3c34caeb72d9e3550ca01ab247f1222d" name="systemtap-runtime-virtguest" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="500248f815f02b9a3667529d2cdde8aaea156c9ed729128113efbab116220432" name="systemtap-runtime-virtguest" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="20f40be37988cdc3b55fc1e0d335445d2ed0d620c1cc4ed861f88c7b4e319899" name="systemtap-runtime-virthost" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="318ed7207bacd8c7ea14aaa6d4ac299dd21423b3db5f79ccdda9d855752343c9" name="systemtap-runtime-virthost" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="d7c80febcd15740685b84b053205cb32f6370aea5e711eaf8df1f110eb76f5a0" name="systemtap-sdt-devel" arch="i686">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="37380bb9daf03e97cc33f04e567781a6670e53d2697c6533324125511041f9c2" name="systemtap-sdt-devel" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="2fb5a1ed71eabf5f22c64fb2cbdd7e22ed1c8c66f9954d4ea4b505f31db389b7" name="systemtap-sdt-devel" arch="i686">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="0fcdf076e40654734e9aa9b304219fc0e1809343a8889fc69523062a9065126a" name="systemtap-sdt-devel" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="c10d5e45f0c41728adafc2fd26a49bbd6a4bebd9a58de4f97553d090e19e50a6" name="systemtap-server" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="d4b7059cfc5021cf4a345b3f5a95293da5ad6f85be7d716eb65d571a1a498273" name="systemtap-server" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="d3e7650e45e51e5fa7dc65d96415c58a5e2e22c9759ed87707dde27babb82d33" name="systemtap-testsuite" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="4d182ea454add2c83425de3549d80b46e3f2226130bcc0d4b8e3e050a34b3365" name="systemtap-testsuite" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="f31b8182e2cc0cce689db8f50309d8af4538939da3fea9de8339d1c88d524ec2" name="teamd" arch="i686">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="d69dce0d69b44f0bb84e4602fd517329980726d6dae3c5e0b61c7dabf39f22f9" name="teamd" arch="x86_64">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="11e5a725844496670c4e988b1c6666c1d79818fda22607ffd1aaa2e5d8f0c1b4" name="teamd-devel" arch="i686">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="399004a30a54d7590dd9a8cd81580e4b435fb18c1d4f4948627bb4e7e26c1d6b" name="teamd-devel" arch="x86_64">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="83a6a3b5d0df648b4956d88f6f692851a40e0465ccb298dbe2fc0d4bc80c3cc4" name="thunderbird" arch="x86_64">
  <version epoch="0" ver="52.3.0" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.0-1" date="1479470400">- Update to 45.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
</package>
<package pkgid="bae5ff356d2a9fc6c7b26977a4aa13c44fea42ce596a955330d6b185355022af" name="thunderbird" arch="x86_64">
  <version epoch="0" ver="52.4.0" rel="2.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
</package>
<package pkgid="5a2646de9215ebea090773197fe18e7b785d753786c9b24f663437e94912a7b0" name="thunderbird" arch="x86_64">
  <version epoch="0" ver="52.5.0" rel="1.el7_4"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
</package>
<package pkgid="afb86d4b35aab5b64b25811e9ad370e7f77778c13151f40bd074d2c4c7e6ed84" name="thunderbird" arch="x86_64">
  <version epoch="0" ver="52.5.2" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
</package>
<package pkgid="e979a7a153e2ee82e6463904a04944fe6106cd43237e7d6a899d836c9c220d69" name="thunderbird" arch="x86_64">
  <version epoch="0" ver="52.6.0" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
</package>
<package pkgid="d924c5a49cf9361ccb9d28204523232e527dca3b6a07c4aa73735a8b84696b09" name="thunderbird" arch="x86_64">
  <version epoch="0" ver="52.7.0" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
</package>
<package pkgid="815bfb9c238457f3c6581f9040dfe1a648b79306d5eb84ca0e22ac1910967c60" name="tigervnc" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="d21f372a82c46594dbe3ea6f4e00281164a7c92e54c2f7774f3363549dcd5344" name="tigervnc-icons" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="5aa0f143a9d51b30137d97bb0e328bc3980cecc66d29685fdf56c32cd7dbbe7d" name="tigervnc-license" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="cbf7fb02259dc88b86268f4da7e7a9d5453d263c310f6ca4039c71c8481eb12a" name="tigervnc-server" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="56a609c2b669b80d287e352f88f1bc9cf0a0c04952b3513e8a50326f56be2cbb" name="tigervnc-server-applet" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="a4e2db7f9d647e85a73568d31810e7b9073093e65160fe55982aab1052fec79f" name="tigervnc-server-minimal" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="378f0d3edadd649ae2e854cbdacf28f5bc0dd724652787da8f23756e9ca4b575" name="tigervnc-server-module" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="1c22aedc921332c93be7623f9d46ecfbd205fb9f328d381d02ab476540edb957" name="tomcat" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="34ea5cd802e50c9f972277826ec753abfa1b00ff84bf5bcd9745dba582c963ca" name="tomcat-admin-webapps" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="acd7067f3b9c66af2ed669fbef5d74fad2efb7aec75f7b7456b97342f31886d0" name="tomcat-docs-webapp" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="cdcabf3ca8484e38b3186a639d2459edcc723be3458a11580b0276bdc21fd01e" name="tomcat-el-2.2-api" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="eec34869fc5055c26b5922c83510aab45c4de64fd166b6b39c32cdf662b94534" name="tomcat-javadoc" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="35f06f5d33a9adb10c5f9fd8d496a5b23ea7db94229848ac63e57350f7301e92" name="tomcat-jsp-2.2-api" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="80010be4942532a1b64e82a63e8c2e56ae7c69c28f20b0b46c5f26f39d9bfcfc" name="tomcat-jsvc" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="910b52ce419a7902f8e35112c4da3cd76f7b9779c7d494a6dcaad2190c4ad4fc" name="tomcat-lib" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="9e88852e6b0c92693a2e22eb9b62496bc3f85bb0512cb54148233cbd17c3f939" name="tomcat-servlet-3.0-api" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="5323cfa29da61ae83088d3cce37745da19173aa1a75ee67dab02737813de7296" name="tomcat-webapps" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="0e35d98f0ec77a37830113bc084cf68e92bc09853310f6a86b42d41dd3b2091c" name="tuned" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="96815c89e0f79290244c05809b455db59c1e3bf94a510e8c0f254b06b94efa09" name="tuned-gtk" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="750b8af063e1150e573ddbe5d94a95588a86af65f4afc2bf5ffcaaa03c87e059" name="tuned-profiles-atomic" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="6c112bc39eee7e4cb62d081b02d57590e9f215f87a43a73e2e0e42b9d4ba0bfb" name="tuned-profiles-compat" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="8b226a91cae7ede5f2d263c809974127665e7c368b37f9d1b6f5d7f968fe2b3a" name="tuned-profiles-cpu-partitioning" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="0777df463552f9e9fd5b7551a1bf81261c4c3a3930b786d0374cf1b170df7b6c" name="tuned-profiles-nfv" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="1054393d8d8fe3b88fda9844b9f83fe48b0fcc902d9b47404ae3b276e83f4587" name="tuned-profiles-nfv-guest" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="2c00e1f285b20dbdb0c40e30fdf00895c1c9c0c01f2504d707eac88fc76f98ce" name="tuned-profiles-nfv-host" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="7a0686bc13a0c733a135957d8c6332beb9290152f53a222056fb2f8b50489277" name="tuned-profiles-oracle" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="f02ece85bc9c7606a9b1998e4e3ebc29a10c68b8d6c23f0b1734ceabcf229b0c" name="tuned-profiles-realtime" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="295dad48f218d2e32a127e0dd62bf61dd33d25e7fcfd7a07a0b2358392de556a" name="tuned-profiles-sap" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="50733764e8bcb0e25e7b79f07ef21b96a7345c82328b196340dc4f18a2c4ffa6" name="tuned-profiles-sap-hana" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="e15dcb9a59441b2bdf05877b09e7132fd8a1f74af59460280840d62201ad444c" name="tuned-utils" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="388e586198fd64885c210b2b67ee99c800028fda412fac2e800d3f697037b071" name="tuned-utils-systemtap" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="425fdf4e44dc2362d8675778479bbce8a73310686c1ca48074c43010e8377cb4" name="tzdata" arch="noarch">
  <version epoch="0" ver="2017c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016f-2" date="1474372800">- Interim builds to add support for leap second.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.prerelease" date="1474891200">- Rebase to prerelease version of tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07. 
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
</package>
<package pkgid="1e9fd1e93cd66de18871487362d85865dfb455a31774539d2dbc2ec468dbdd40" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
</package>
<package pkgid="5dfb3d4e29dd1efc0d418c23b5b297a5bb8286d45443da1bd571c9467b0d2164" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018d" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
</package>
<package pkgid="d78c070ad1cd75d69ae78b61a43b32df00226aa4ebfeeec37b09b944bc8026db" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2017c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016f-2" date="1474372800">- Interim builds to add support for leap second.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.prerelease" date="1474891200">- Rebase to prerelease version of tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07. 
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
</package>
<package pkgid="0bda0b198eb2c7e9f1da0ee4d682a408be976328ea15569c7a545bb9d39e1369" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
</package>
<package pkgid="6e827ba522f80982e7c31d65c425f94cfc25cbbc4e4fcecc7e98c5c04e4fbb01" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018d" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
</package>
<package pkgid="284a89a7644db8228678c1d0447367c7935c96b5f7e372727e9e0fb9fc5b319f" name="util-linux" arch="i686">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="6600e80cd420972d086efe26a680c469279fc32cfccacd1a11c5c43c8eaa927e" name="util-linux" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="e8b10bb5c12f89aeeb16a065e670311eabb311e768ce2747773c805efdfd442d" name="uuidd" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="2f4a604e575e28eeec00775b71c9fc882c0321d2174c198311953d3e47bc85f6" name="valgrind" arch="i686">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="21306a139d9e6fb0f2660878256dc553860308f75654df2ac61c445c13a64b66" name="valgrind" arch="x86_64">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="0f112cbddcf44f2000e977ff22d9ce8b12a6349dd30e2be8ec21b437530e79ad" name="valgrind-devel" arch="i686">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="8e155cd41b6adfc26270e4ee7d3747d62df85f56827d4ded960aeeb8a4eab74f" name="valgrind-devel" arch="x86_64">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="018080c7e3d2e682d96385df8dedad62414bba9983d7a2a3b1e26c0b63bc5674" name="valgrind-openmpi" arch="x86_64">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="ada2c309040ac107517954e4a5f2229bf7c073911a9b7c004be644407efc4ca1" name="veritysetup" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="8ed9b8b1395982753f9a4f31c94f3acca047b4ef79627ea6c8b6b8591b439e46" name="virt-dib" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="f0baaec20ade87e9c0e6b07f7d1c678745dbca472252848049a1257068655a78" name="virt-p2v-maker" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="4ba10079a3562a556f4bbe793a2fb21c9af2177d41e527dc0d15f39601eb9acb" name="virt-v2v" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="ba5f5557458fa1c3530d97a022300ee869ed0bd9476604bc1f44c1559574a28a" name="virt-who" arch="noarch">
  <version epoch="0" ver="0.19" rel="7.el7_4"/>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.16-1" date="1450353600">- Version 0.16</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.17-1" date="1463486400">- Version 0.17</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.18-1" date="1476187200">- Version 0.18</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-1" date="1488456000">- 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
- 1388577: Adding UTF-8 support (pcreech@redhat.com)
- 1410000: Include org_id in hv base channel (pcreech@redhat.com)
- 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
- 1405967: Filter host via glob or regex (pcreech@redhat.com)
- Adds --password option to virt-who-pasword (tstrachota@redhat.com)
- 1392390 Fix default interval handling (pcreech@redhat.com)
- BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
  large numbers of hosts easily (chris@chrisprocter.co.uk)
- 1369107: Only load files with .conf extension (pcreech@redhat.com)
- 1383436: Obey the interval setting (csnyder@redhat.com)
- 1299643: Update virt-who-config man page to include NO_PROXY
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-2" date="1490788800">- 1437229: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- 1437228: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-3" date="1491998400">- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- 1436811: Send reports on the interval per destination (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-4" date="1493035200">- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-5" date="1495022400">- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-6" date="1500638400">- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-7" date="1508932800">- 1506263: Updates to the job polling frequency (csnyder@redhat.com)</changelog>
</package>
<package pkgid="72f121c248281fe15cdbfe8e80fbfeec69f20a28152f62702d697d027dbcfbec" name="virt-who" arch="noarch">
  <version epoch="0" ver="0.19" rel="8.el7_4"/>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.17-1" date="1463486400">- Version 0.17</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.18-1" date="1476187200">- Version 0.18</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-1" date="1488456000">- 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
- 1388577: Adding UTF-8 support (pcreech@redhat.com)
- 1410000: Include org_id in hv base channel (pcreech@redhat.com)
- 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
- 1405967: Filter host via glob or regex (pcreech@redhat.com)
- Adds --password option to virt-who-pasword (tstrachota@redhat.com)
- 1392390 Fix default interval handling (pcreech@redhat.com)
- BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
  large numbers of hosts easily (chris@chrisprocter.co.uk)
- 1369107: Only load files with .conf extension (pcreech@redhat.com)
- 1383436: Obey the interval setting (csnyder@redhat.com)
- 1299643: Update virt-who-config man page to include NO_PROXY
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-2" date="1490788800">- 1437229: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- 1437228: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-3" date="1491998400">- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- 1436811: Send reports on the interval per destination (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-4" date="1493035200">- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-5" date="1495022400">- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-6" date="1500638400">- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-7" date="1508932800">- 1506263: Updates to the job polling frequency (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-8" date="1517832000">- 1540296: Add JSON-RPC support for VDSM (khowell@redhat.com)</changelog>
</package>
<package pkgid="fe7e0dd9847415ebe2c499a170aacd1e4455e13c4572b1a828983a749799704c" name="virt-who" arch="noarch">
  <version epoch="0" ver="0.19" rel="9.el7_4"/>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.18-1" date="1476187200">- Version 0.18</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-1" date="1488456000">- 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
- 1388577: Adding UTF-8 support (pcreech@redhat.com)
- 1410000: Include org_id in hv base channel (pcreech@redhat.com)
- 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
- 1405967: Filter host via glob or regex (pcreech@redhat.com)
- Adds --password option to virt-who-pasword (tstrachota@redhat.com)
- 1392390 Fix default interval handling (pcreech@redhat.com)
- BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
  large numbers of hosts easily (chris@chrisprocter.co.uk)
- 1369107: Only load files with .conf extension (pcreech@redhat.com)
- 1383436: Obey the interval setting (csnyder@redhat.com)
- 1299643: Update virt-who-config man page to include NO_PROXY
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-2" date="1490788800">- 1437229: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- 1437228: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-3" date="1491998400">- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- 1436811: Send reports on the interval per destination (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-4" date="1493035200">- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-5" date="1495022400">- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-6" date="1500638400">- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-7" date="1508932800">- 1506263: Updates to the job polling frequency (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-8" date="1517832000">- 1540296: Add JSON-RPC support for VDSM (khowell@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.19-9" date="1521115200">- 1530132: Do not replace /etc/virt-who.conf on rpm upgrade
  (csnyder@redhat.com)</changelog>
</package>
<package pkgid="3f4d1c77a5deaab57c1bdec562299cf0fb147b2ce357c1ecf5f93ae0068462f6" name="webkitgtk4" arch="i686">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="d72401a6e8b4f18f6c8473bbf816d88c63a0f583fab7fd4f7d8e0606b59cccb9" name="webkitgtk4" arch="x86_64">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="3e0cb2b94f05ea41e3d19390ed9d84bb2a305b07b1f2858b0d4f37f1d8a88fb6" name="webkitgtk4-devel" arch="i686">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="f1d58b5ad591957b8ef3065a2844ccac656bf1dcf58cd84f59cf967ccdcf83f4" name="webkitgtk4-devel" arch="x86_64">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="650e269813828ca35a1ec078be0a218f39838c841ec58fc0a599b380a454078e" name="webkitgtk4-doc" arch="noarch">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="0be62cde0eac6ab9b3a133a31c60b5be955f808d9d68456ea1dce2878afd0bdd" name="webkitgtk4-jsc" arch="i686">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="3a7c57b662eaa3134db830fe2cd769163d0d140e133167d8af59cc6faad544c3" name="webkitgtk4-jsc" arch="x86_64">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="ade1ef4d7ea41c049ad7e2d1e431197d7e5d3da7438138cd068a010a65adc056" name="webkitgtk4-jsc-devel" arch="i686">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="07748debce2884886898e86559f73667424e08f5dc895b62d74a7b2df282592b" name="webkitgtk4-jsc-devel" arch="x86_64">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="412b0cd688b458735a247bb5f0f210b9b3ba07e265b7232683a9faaa87ce39df" name="webkitgtk4-plugin-process-gtk2" arch="x86_64">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="81af76cc7e4c526aef115a4a70c667050a77146801e5b16fd70a14fef61a580f" name="wget" arch="x86_64">
  <version epoch="0" ver="1.14" rel="15.el7_4.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-7" date="1373457600">- Fix double free of iri-&gt;orig_url (#981778)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-8" date="1373889600">- Fix deadcode and possible use of NULL in vprintf (#913153)
- Add documentation for --regex-type and --preserve-permissions
- Fix --preserve-permissions to work as documented (and expected)
- Fix bug when authenticating using user:password@url syntax (#912358)
- Document and fix --backups option</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-11" date="1414152000">- Fix CVE-2014-4877 wget: FTP symlink arbitrary filesystem access (#1156136)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-12" date="1458561600">- Fix wget to include Host header on CONNECT as required by HTTP 1.1 (#1203384)
- Run internal test suite during build (#1295846)
- Fix -nv being documented as synonym for two options (#1147572)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-13" date="1466424000">- Fix CVE-2016-4971 (#1345778)
- Added support for non-ASCII URLs (Related: CVE-2016-4971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-14" date="1491998400">- TLS v1.1 and v1.2 can now be specified with --secure-protocol option (#1439811)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15" date="1493985600">- Added TLSv1_1 and TLSv1_2 as secure-protocol values to help (#1439811)
- Fixed synchronization in randomly failing unit test Test-proxied-https-auth (#1448440)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15.1" date="1508846400">- Fixed various security flaws (CVE-2017-13089, CVE-2017-13090)</changelog>
</package>
<package pkgid="3bb6cb7db61e99b585e8ee6bb79355150c3b9de18b594680280a8dc9ec87170c" name="wpa_supplicant" arch="x86_64">
  <version epoch="1" ver="2.6" rel="5.el7_4.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.0-19" date="1452513600">- nl80211: resubscribe to netlink events when cfg80211 gets re-added (rh #1085473)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.0-20" date="1458561600">- D-Bus: Don't do &lt;deny send_interface="..." /&gt; in dbus service file (rh #1319796)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.0-21" date="1470744000">- fix wpa_supplicant.sysconfig to avoid duplicate -u and -f arguments (rh #1351388)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.0-22" date="1481889600">- bump revision for RHEL7.4 rebuild</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-1" date="1486728000">- Update to 2.6 (rh #1404793)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-2" date="1488888000">- Backport support for IEEE 802.1AE MACsec (rh #1338005)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-3" date="1489147200">- Fix coverity failures (rh #1430407)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.6-4" date="1491220800">- Include MACsec headers (rh #1438007)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-5" date="1495022400">- macsec: Fix segmentation fault in case macsec.ko is not loaded (rh #1440646)
- nl80211: Fix race condition in detecting MAC change (rh #1447073)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-5.1" date="1507896000">- avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
  CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,
  CVE-2017-13087, CVE-2017-13088)</changelog>
</package>
<package pkgid="e9f8aa0d8e0dcfc991a78166559fcd7885e08cce92328e0e6536a04740c63de2" name="xmlsec1" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="625101f1f80a06e7772e8df3b10ca699aef93834f0c136a72f352316970fd81e" name="xmlsec1" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="f66f6b354755fd3a2991e3062c81e1104bfeaa742f8d40849c8cecc99c4a1cb7" name="xmlsec1-devel" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="148d83807036b151fef604d810b6ce8cb0cc30448994d616d1c0d1f1ae53adb8" name="xmlsec1-devel" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="c1a661f8eaadb7d50df8c45f430ec9066344f00750151f1061dbaeef8a19cf95" name="xmlsec1-gcrypt" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="3a947601e495ae56fa54290879ee2bdd7317b4c1df25813fd2a14f3908e376af" name="xmlsec1-gcrypt" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="2bf2ac9fc31a68adf780b5a79c936a282d2fa9bd7910567aecb623acc418e2fd" name="xmlsec1-gcrypt-devel" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="f998f5a79fe0da0f87cb494ff2aa4c312c9123c4e6ce55a03f7f4626b78d9459" name="xmlsec1-gcrypt-devel" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="5a804fb75e56ac78e18b7bb7954707409df5d5c8fd1a88da97975603f3d14cfe" name="xmlsec1-gnutls" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="921777c61e0ed222cdfbb182923c122c6d1b97c9b62e1c6b8966045fb542b4c7" name="xmlsec1-gnutls" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="916ade1ac9a79345a97cb06c716f2cb205075f8480db36a7c804e1a1c8b9efdc" name="xmlsec1-gnutls-devel" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="56aeacf377e91aa471b30edf6f52d40609bb3d3256959440b48a5c343308c1a0" name="xmlsec1-gnutls-devel" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="6b5bea835b26eb266d878b4e4917e57dd26a18225fb4342de76a99502d34ca5e" name="xmlsec1-nss" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="5db5a3a65d841397a4085b99ae882a03b26958ba76191ed8102f419b4309642a" name="xmlsec1-nss" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="a83236e29c9eea3f690cba53e88832132a256cd38177bb7ab0cb92cbfb17cddd" name="xmlsec1-nss-devel" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="ae950cae3c788e9892b4a05784b9e43f35721cd4d9ddea321fe7c3445a7281da" name="xmlsec1-nss-devel" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="6f135d322d7556fe95798968294a1d57631d30df09b76b4623b151c7ec45cd86" name="xmlsec1-openssl" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="8f22295fbf7d82ad25719316e252b99ca7202a246992861d81ca5f6fe3d66dd7" name="xmlsec1-openssl" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="27325d9d31f7cc8f51072833d4803628594926251d546d544de9b42f725fb8b6" name="xmlsec1-openssl-devel" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="705be22b20eb1c27068ca518bd5f21ddbec9216aa2fae31b7badf010f880066b" name="xmlsec1-openssl-devel" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="95fa338477ae7ce890ca66a6e4e6dd89d471ac377ce114db38a6bf697cf3d3dc" name="xorg-x11-server-Xdmx" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="7aa5b786bb4c9680de48b64c18e1851165d5681a9b1161f504614b06748cc4b2" name="xorg-x11-server-Xdmx" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="03285c1f71d30f98ca7da6aab9984eac73183cbaad4c154262cfed4a1dafff40" name="xorg-x11-server-Xephyr" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="f114b7415704f514beba779ea84a4492f61fa81c077e9985e0b816cd51f32aa4" name="xorg-x11-server-Xephyr" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="20f9e5a8bde4524a650ce810e1dbfefec4cc2b4b25802cdee815fd21add927df" name="xorg-x11-server-Xnest" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="5984aeed89cd295cd2bf311aa266865c9eee2f8d4d13c6dddb672c72ccdbdd52" name="xorg-x11-server-Xnest" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="aa39ef14b840b832c09b499bc4d13e6be961476468b7f47658e18d258fada811" name="xorg-x11-server-Xorg" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="9be504e2b3d78d4f2f1ac084554e78296e9e588a7fb43a72f79fa3213dcc81ae" name="xorg-x11-server-Xorg" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="52b116ee6683ec1d12d1064892e93b606781795f7e62ef0c838ba7f972dee2ed" name="xorg-x11-server-Xvfb" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="70961fe250204f3c3fb9cfea1d3fb208ebaae827ccd93cd3f42d16bf753b22bb" name="xorg-x11-server-Xvfb" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="df7d83e47f60f0c59ecd0de9a1a246fe59c88a767786cf85e4b83bf6e1bba1df" name="xorg-x11-server-common" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="7d0b67e40268fb336f50bf585479980b04e2b69441d4cb5818ae1a0620c5d251" name="xorg-x11-server-common" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="e780dc10a14a6d1692e4db045fcba4220732f825200da045cd1ef3b8f9385961" name="xorg-x11-server-devel" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="3832daf0d3942d9182bccf6a0a8737e4bf4acc2e9e78dcc101b9ebb716b82012" name="xorg-x11-server-devel" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="0a97fb2c38bf2769a6c0c37d8a232fa8fd68b37938c4020dcc73e51047471e2b" name="xorg-x11-server-devel" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="cde0d7980bea1aa848687b5f6523ebed8537a20c04364977e754d4e2dcf47a6e" name="xorg-x11-server-devel" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="1c4392cc6bcffc60e97c64c1c6c89c6817cc277cde5fa260eb31f0331dcfa22f" name="xorg-x11-server-source" arch="noarch">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="a21aacdd78bbdc2fcad3349b1f2aa0219ec50b618c8f51f11288b19a775ff020" name="xorg-x11-server-source" arch="noarch">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
</otherdata>